OT Security Platform Engineer – Dragos

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services:
Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

We are seeking an experienced OT Security Platform Engineer / Technical Lead to own and operate the Dragos security monitoring platform across a global manufacturing environment. This is a hands-on technical leadership role responsible for platform health, sensor management, detection tuning, OT security triage, site onboarding, and network segmentation support. The role will also coordinate day-to-day activities of a small managed services team and provide OT security context to Threat Detection & Response teams.

The ideal candidate will combine strong Dragos or equivalent OT monitoring expertise with ICS networking, security operations, and client-facing delivery experience.

• Own day-to-day operations of the Dragos Platform, including sensors, Site Store, OT Watch, platform health, upgrades, configuration consistency, and data quality.
• Monitor and troubleshoot unhealthy or offline sensors, resolve data coverage issues, and coordinate technical issues with Dragos support and network teams.
• Validate sensor placement, SPAN/TAP coverage, and passive network visibility across industrial environments while identifying monitoring gaps.
• Triage high-severity OT security findings, validate affected assets, investigate potential benign activity, and escalate confirmed or suspicious events to the Threat Detection & Response team.
• Tune Dragos detections to improve fidelity, reduce false positives, and ensure critical findings and OT Watch alerts are appropriately routed to enterprise security teams.
• Support SIEM integration, detection forwarding, escalation workflows, and operational handoffs while providing OT-specific context for security investigations.
• Deploy and validate Dragos sensors for new or acquired sites and manage secure decommissioning when facilities are closed or divested.
• Support OT network segmentation initiatives by analyzing traffic patterns, planning sensor placement, and validating monitoring coverage following network changes.
• Coordinate daily activities of managed services resources, manage escalations, and act as the primary technical point of contact for OT Security leadership.
• Maintain operational runbooks, transition plans, escalation matrices, weekly status reports, monthly scorecards, service metrics, and knowledge-transfer documentation.

• 7+ years of experience in OT/ICS Security, Industrial Cybersecurity, Network Security, Security Operations, or related infrastructure security roles.
• Strong hands-on experience operating Dragos Platform or comparable OT network monitoring solutions such as Claroty or Nozomi Networks in production environments.
• Solid networking knowledge including VLANs, SPAN/TAP, passive monitoring, routing, switching, firewall concepts, traffic flows, and network segmentation.
• Strong understanding of ICS/OT environments, industrial protocols, Purdue Model concepts, zones and conduits, and the availability and safety requirements unique to operational technology.
• Experience triaging OT security detections and providing actionable context to SOC, Threat Detection & Response, or Incident Response teams.
• Experience…