Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 8 days ago

Associate Principal Incident Responder

Dragos50 open roles

Pay
€120,000 a year
Where
Germany
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAssociate Principal Incident ResponderDragos · Germany

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Dragos's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. Dragos postings stay open a median of 42 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 8 days ago

Dragos median: 42 days open

The posting

At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.

About the Role:

Dragos is hiring an Associate Principal Incident Responder in Germany to lead OT incident response and strengthen customer IR maturity across Europe. You’ll run active investigations and deliver advisory work, including maturity assessments, tabletop exercises, and purple teaming, while improving our IR methodologies and representing Dragos as a thought leader. Ideal for practitioners who are equally strong executing investigations and advising on strategy.

Responsibilities:

  • Lead incident response engagements for industrial customers, onsite and remotely, including investigations, threat hunts, triage, and compromise assessments.
  • Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing communications throughout the response lifecycle.
  • Drive investigations to resolution across industrial environments, from root-cause analysis to containment and remediation strategy, with participation in the on-call rotation.
  • Own the post-incident loop by conducting after-action reviews and feeding lessons learned into playbooks and procedures.
  • Deliver advisory services such as IR planning workshops, tabletop exercises, and maturity assessments that align response capabilities with business risk.
  • Mentor teammates and act as a technical escalation point, while staying accountable for delivery quality, timeliness, and utilization.
  • Build customer relationships and strengthen Dragos services through stakeholder engagement, research and thought leadership, and input on service offerings and delivery models.

Qualifications:

  • Must be a German resident.
  • Fluent in German with a working proficiency in English.
  • 8+ years of hands-on incident response and digital forensics experience, with lead-level scope and depth in at least two of network, hardware (controllers/instrumentation), memory, or disk forensics. Methodology mastery matters more than tool specialization.
  • Proven ability to lead end-to-end investigations, correlating events across data types to uncover threats, hunt malicious activity, and coordinate communications during incidents.
  • Experience in ICS/OT cybersecurity, including industrial architecture, threat landscapes, vulnerabilities, and frameworks and standards.
  • Experience in industrial environments (asset owner, operator, integrator, or consultant), with the ability to advise at both technical and enterprise-strategy levels.
  • Consulting or advisory experience, translating technical depth into strategic guidance, with excellent written and verbal communication, including customer-facing documentation, playbooks, executive briefings, and calm leadership during high-pressure incidents.
  • Familiarity with the European and German OT regulatory context: NIS2, IT-SiG 2.0, BSI KRITIS, IEC 62443, and NIST CSF.
  • Willingness to travel up to 40% (domestic and international) to support customer engagements.

Compensation:

  • Salary: €120,000
  • Competitive Equity Package
  • Comprehensive Benefits Plan

#LI-JF1 #LI-REMOTE

Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Dragos's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Dragos's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Dragos's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.