At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.
About the Role:
The Technical Instructor, Learning and Enablement delivers hands-on, technical training to security and operations teams at Dragos customer organizations. The work is primarily classroom and lab-based: you will travel to customer sites and facilitate virtual sessions, teaching the OT/ICS security concepts, platform workflows, and threat analysis skills that practitioners need to do their jobs.
This is not a soft-skills training role. Courses are technical. Students are engineers, OT security analysts, SOC operators, and plant personnel who will challenge you. The right candidate has real experience in OT/ICS environments and can hold a room of practitioners while walking through platform configuration, network traffic analysis, threat detection workflows, and incident response procedures.
You will also contribute to keeping course content current, working closely with Dragos product teams and the threat intelligence team to ensure what you teach reflects the platform as it ships and the threat landscape as it exists today.
Responsibilities:
- Deliver instructor-led and virtual instructor-led training to security teams, OT engineers, and operations personnel at Dragos customer organizations.
- Facilitate lab-intensive courses covering the Dragos Platform, OT/ICS network visibility, asset identification, threat detection, vulnerability management, and incident response workflows.
- Teach to technically experienced audiences including engineers, SOC analysts, and plant operators, who expect depth, accuracy, and practical application and adapt delivery in real time based on audience background, prior OT experience, and comfort level with the Dragos Platform.
- Manage hands-on lab environments during training sessions, troubleshoot technical issues as they arise, and keep sessions on track.
- Coordinate with Dragos account and customer success teams prior to on-site engagements to understand the audience profile, deployment stage, and any site-specific constraints.
- Partner with Dragos product teams to stay current on platform releases, new features, and configuration changes that affect course material.
- Work with the Dragos threat intelligence team to incorporate current OT/ICS threat activity, threat group behavior, and real-world incident context into technical instruction. Identify gaps or inaccuracies in existing course content and work with the Learning and Enablement team to address them.
- Represent Dragos professionally in customer environments: be prepared, be credible, and leave each training engagement having raised the customer's capability.
- Support post-training questions and follow-up from learners where appropriate, in coordination with the customer success team.
Qualifications:
- 3 or more years of hands-on experience in OT/ICS security, operational technology engineering, or a related discipline directly supporting OT environments.
- Demonstrated ability to deliver technical training or instruction to experienced professional audiences, including engineers, security analysts, or operations personnel.
- Working knowledge of OT/ICS protocols, network architectures, and security monitoring concepts (e.g., Purdue model, DMZ design, passive monitoring, asset identification).
- Comfort with lab-based technical instruction: setting up environments, troubleshooting issues in real time, and keeping technically complex sessions on track. Strong verbal communication skills. Able to explain complex OT security concepts clearly without oversimplifying to an audience that knows the space.
- Willingness and ability to travel to customer sites, including industrial facilities, for on-site training engagements (25% travel expected).
- Experience with virtual lab platforms and remote training delivery tools used in technical instruction.
- Direct experience with the Dragos Platform or comparable OT security platforms (network monitoring, asset inventory, threat detection) preferred.
- Certifications in OT/ICS security (GICSP, CSSA, ICS-CERT training, or equivalent) or relevant industry credentials preferred.
- Sector background in electric utility, oil and gas, manufacturing, water and wastewater, or other critical infrastructure environments preferred.
Compensation:
- Competitive Equity Package
- Comprehensive Benefits Plan
#LI-JF1 #LI-REMOTE
#LI-NH1 #LI-REMOTE
Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.
