Principal Consultant - ICS/OT Cybersecurity

About the role

Dragos' APAC Professional Services team is seeking a Principal Consultant to lead high-impact cybersecurity engagements for industrial organizations, helping them secure, mature and scale their OT security programs. The role covers enterprise-level architecture reviews, threat assessments, tabletop exercises and advanced advisory services for critical infrastructure sectors such as government, electric, oil and gas, water treatment and manufacturing. It is a remote-first position.

Key responsibilities

• Lead and oversee complex ICS/OT cybersecurity engagements, including architecture reviews, threat assessments, compromise investigations and executive-level tabletop exercises.
• Act as principal subject matter expert and trusted advisor, building long-term executive relationships.
• Deliver findings, risk narratives and recommendations, including executive briefings and facilitation of technical and leadership discussions.
• Review and guide Scope of Work, Rules of Engagement and engagement governance.
• Turn customer insights, emerging threats and industry trends into research that influences Dragos technology, detection content, services methodology and training.
• Refine consulting workflows and delivery models, and represent Dragos as a thought leader through webinars, whitepapers, conferences and industry forums.
• Mentor teammates and partner with internal stakeholders on service expansion and customer success.

Required profile

• Singapore citizenship is required.
• 10+ years of progressive cybersecurity experience, including leading and architecting OT/ICS security initiatives and delivering complex consulting engagements.
• Extensive hands-on experience in industrial environments (asset owner, operator or integrator).
• Strong leadership presence with experience influencing cross-functional, geographically distributed teams and senior stakeholders.
• Willingness to travel for onsite engagements as needed.

Required skills

• Deep expertise in ICS/OT cybersecurity, industrial architectures, threats, vulnerabilities and frameworks.
• Advanced knowledge of PLCs, HMIs, RTUs, industrial instrumentation and protocols such as Modbus and DNP3.
• Mastery of security analysis, detection engineering and integrations such as SIEM/SOAR, MDR and endpoint/network visibility platforms.
• Ability to write executive-level deliverables and technical frameworks.

What we offer

• Salary of 230,000 SGD.
• Competitive equity package.
• Comprehensive benefits plan.