Top Cybersecurity Jobs in Seattle, WA

Leads and mentors a product security engineering team while remaining hands-on. Owns certification, accreditation, DISA STIG hardening, SOC 2, ISO 27001, audit readiness, vulnerability remediation, security tooling, and authorization initiatives. Coordinates with Compliance, Legal, Sales Engineering, and customers; tracks remediation SLAs and certification posture; establishes evidence collection processes; and translates technical security strategy into an executable roadmap.

Leads OT incident response investigations as Incident Commander, including triage, threat hunting, compromise assessments, root-cause analysis, and customer advisory work. Develops incident response plans, playbooks, maturity assessments, and tabletop exercises; manages customer relationships and communications; contributes to threat research and thought leadership; mentors responders and improves IR methodologies. The role requires extensive ICS/OT cybersecurity, digital forensics, consulting, incident management, and communication experience.

Lead hypothesis-driven threat hunts across industrial control system and operational technology networks. Investigate suspicious activity, escalate high-severity alerts, configure Dragos Platform hunt profiles, develop hunting content, analyze network telemetry, and improve detection capabilities. Advise customers during critical security events, produce technical reports, create repeatable tooling, and mentor junior team members on OT protocols, adversary tactics, and threat intelligence.

Serve as the primary technical advisor for federal customers using the Dragos OT cybersecurity platform. Lead onboarding, implementation, adoption, account reviews, roadmap alignment, optimization, customer health monitoring, and recovery plans. Partner with Customer Success, Support, Product, and Sales while delivering cybersecurity training, workshops, and executive briefings. Apply ICS/OT expertise to help customers operationalize security use cases, improve maturity, mitigate risk, and achieve measurable value.

Lead large-scale Linux sensor platform initiatives for high-performance OT and ICS network monitoring. Design and improve packet ingestion, capture pipelines, queue management, broker integration, observability, and reliability. Own production root cause analysis, postmortems, performance benchmarks, and durable fixes. Translate business goals into technical plans, establish engineering standards, mentor team members, and guide architecture across the sensor codebase.

Develop and validate high-fidelity threat detections and asset-identification analytics for industrial control system environments. Analyze threat intelligence, packet captures, host logs, network and device artifacts, and large datasets to identify adversary behaviors. Mentor detection engineers, review and triage detection requests, document analytics processes, and partner with engineering and quality teams to address platform gaps. Support ICS cyber-range activities and contribute to detection testing, tuning, and knowledge-base maintenance.

Design and maintain data pipelines, models, and transformation layers for analytics. Build data contracts, observability and lineage tooling, collaborate with product engineering, and optimize data structures for performance and scalability.

Lead and grow a data engineering team building and modernizing the core data platform for cybersecurity products. Define technical strategy and data models, ensure data quality for detection and analytics, champion AI-assisted engineering, oversee production support and incident response, collaborate with cross-functional teams, and drive hiring and best practices to deliver scalable, high-performance data pipelines and storage.

Design and implement scalable data integrations and transformation layers for cybersecurity products. Build data contracts, dimensional/incremental models, observability, and lineage tooling. Collaborate with product engineering to integrate SIEMs (Sentinel, Splunk) and deploy cloud/on-prem solutions on Kubernetes/Docker, processing medium-to-large datasets and stream/message systems.

Lead and grow the Backend Engineering team building microservice-based platform components for streaming data ingest, detection processing, baseline learning, asset reconciliation, and core platform APIs. Mentor engineers, collaborate with tech leads and product managers, provide technical design input, support production deployments, and occasionally contribute to development and troubleshooting.