Dragos · Hanover, MD, United States
Lead, mentor and develop the Adversary Hunting team, guiding coverage of OT-focused Threat Groups and Temporary Activity Threads (TATs) and fostering analytical rigor and technical excellence. Serve as the primary point of contact for the Adversary Hunting team within Intelligence, aligning team priorities and daily operations with Dragos Intelligence collection requirements and WorldView reporting goals. Lead day-to-day hunting operations, implement and refine established methodologies, and optimize team workflows across Synapse and Storm Query Language-based investigative pipelines. Partner with Intelligence Operations, Vulnerability Research, and Capabilities/Malware Analysis to translate hunting outcomes into prioritized WorldView content and detection opportunities (IOCs, YARA rules). Deliver against and further refine key performance indicators (KPIs) for Adversary Hunting coverage, WorldView report production, and RFI response quality. Guide team members in delivering high-quality, timely analytical outputs, including WorldView reports, Year in Review (YIR) content, and customer- or strategic-level deliverables. Support recruitment, onboarding, and performance management within the Adversary Hunting team, including the development of junior managers and senior hunters. Direct hunting support and triage during surge events (e.g., PIPEDREAM) and incident response engagements. Represent the team through internal briefings and external engagements — writing blog posts, speaking at events, and engaging with practitioners through webinars, customer briefings, and social media.