Senior Technical Instructor, Training & Enablement

Job description

At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place. **About the Role**: The Technical Instructor, Learning and Enablement delivers hands-on, technical training to security and operations teams at Dragos customer organizations. The work is primarily classroom and lab-based: you will travel to customer sites and facilitate virtual sessions, teaching the OT/ICS security concepts, platform workflows, and threat analysis skills that practitioners need to do their jobs. This is not a soft-skills training role. Courses are technical. Students are engineers, OT security analysts, SOC operators, and plant personnel who will challenge you. The right candidate has real experience in OT/ICS environments and can hold a room of practitioners while walking through platform configuration, network traffic analysis, threat detection workflows, and incident response procedures. You will also contribute to keeping course content current, working closely with Dragos product teams and the threat intelligence team to ensure what you teach reflects the platform as it ships and the threat landscape as it exists today. This role extends beyond delivery. You will participate in curriculum design — coordinating with your team to develop new courses, updating existing content, and build training programs that respond to emerging customer and partner needs. Based in APAC, you will be the primary training presence for this region — working with a high degree of autonomy and professional independence. The right candidate is someone who thrives when given broad ownership, sets their own pace, and holds themselves to a high standard without needing external structure to do so. **Responsibilities**: - Deliver instructor-led and virtual instructor-led training to security teams, OT engineers, and operations personnel at Dragos customer organizations. - Facilitate lab-intensive courses covering the Dragos Platform, OT/ICS network visibility, asset identification, threat detection, vulnerability management, and incident response workflows. - Teach to technically experienced audiences including engineers, SOC analysts, and plant operators, who expect depth, accuracy, and practical application, and adapt delivery in real time based on audience background, prior OT experience, and comfort level with the Dragos Platform. - Manage hands-on lab environments during training sessions, troubleshoot technical issues as they arise, and keep sessions on track. - Coordinate with Dragos account and customer success teams prior to on-site engagements to understand the audience profile, deployment stage, and any site-specific constraints. - Partner with Dragos product teams to stay current on platform releases, new features, and configuration changes that affect course material. - Work with the Dragos threat intelligence team to incorporate current OT/ICS threat activity, threat group behavior, and real-world incident context into technical instruction. - Identify gaps or inaccuracies in existing course content and work with the Learning and Enablement team to address them. - Participate in curriculum design: work with your team to develop new courses, build new class formats, and create training programs that respond to customer and partner needs. - Translate feedback from training engagements into actionable content improvements, working collaboratively with the broader Learning and Enablement team to implement them. - Represent Dragos professionally in customer environments: be prepared, be credible, and leave each training engagement having raised the customer's capability. - Support post-training questions and follow-up from learners where appropriate, in coordination with the customer success team. **Qualifications**: - 5 or more years of hands-on experience in OT/ICS security, operational technology engineering, or a related discipline directly supporting OT environments. - Demonstrated ability to deliver technical training or instruction to experienced professional audiences, including engineers, security analysts, or operations personnel. - Working knowledge of OT/ICS protocols, network architectures, and security monitoring concepts (e.g., Purdue model, DMZ design, passive monitoring, asset identification). - Comfort with lab-based technical instruction: setting up environments, troubleshooting issues in real time, and keeping technically complex sessions on track. Strong verbal communication skills. Able to explain complex OT security concepts clearly without oversimplifying to an audience that knows the space. - Experience contributing to curriculum design, course development, or instructional content creation — not just delivery. - Proven ability to work independently and manage competing priorities without close day-to-day oversight; comfortable taking ownership of decisions in the field. - Willingness and ability to travel to customer sites, including industrial facilities, for on-site training engagements (35% travel expected across the region). - Experience with virtual lab platforms and remote training delivery tools used in technical instruction. - Certifications in OT/ICS security (GICSP, CSSA, ICS-CERT training, or equivalent) or relevant industry credentials, preferred. - Direct experience with the Dragos Platform or comparable OT security platforms (network monitoring, asset inventory, threat detection), preferred.