Intelligence and Services Operations Manager

<div class="content-intro"><p>Dragos is on a relentless mission to defend industrial organizations that provide us with the necessities of modern civilization; running water, functioning electricity, and safe industrial working environments. As the market leader in ICS/OT Cybersecurity, we are dedicated to arming our customers with best-in-class technology, threat intelligence, and services to protect their systems as effectively and efficiently as possible. We’re a remote-first culture with operations in North America, Europe, the Middle East, and APAC. We’re looking for mission-oriented teammates who embody our core values of authenticity, transparency, and trust. Are you ready to make a difference? Come join a mission that can save the world! </p></div><p><strong><span data-contrast="auto">About the Role</span></strong><span data-contrast="auto">:</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="none">The Intelligence and Services Operations Manager is a critical connective role within the Dragos organization. This individual contributor position sits at the intersection of Threat Hunt, Threat Intelligence, and Services delivery teams, ensuring that the collective capability of these practices is coordinated, responsive, and operationally excellent — particularly during high-stakes events and surge operations.</span> <span data-contrast="none">Reporting to the Sr. Director of Threat Fusion Operations, this role owns two primary mandates: (1) cross-functional operational coordination across all Intelligence and Services teams, and (2) strategic management and execution of the Dragos Neighborhood Keeper Trusted Adviser Program. The successful candidate will be equally comfortable building process infrastructure in the background and stepping into a fast-moving incident or event when the situation demands it.</span><span data-ccp-props="{" 335559738":60,"335559739":60}"=""> </span></p> <p><strong><span data-contrast="auto">Responsibilities</span></strong><span data-contrast="auto">:</span><span data-ccp-props="{}"> </span></p> <ul> <li>Own cross-functional operational coordination across Threat Hunt, Threat Intelligence, and Services teams — designing cadences, escalation protocols, and shared situational awareness channels that keep the right people informed and aligned.</li> <li>Step in as the operational coordinator during major incidents and surge events, bridging teams to ensure unified response, clear ownership, and nothing falling through the cracks when the threat landscape demands it.</li> <li>Manage the Neighborhood Keeper Trusted Adviser Program end-to-end — from onboarding and agreement execution through active partner engagement with government entities, ISACs, and sector partners.</li> <li>Facilitate intelligence sharing workflows including IOC and signature validation, TLP classification decisions, inbound submissions, and cross-community bulletins distributed to the right participants with the right handling.</li> <li>Identify and fix operational friction between teams — process gaps, unclear handoffs, and coordination debt — and build SOPs that codify how Intelligence Services teams work together, not just in isolation.</li> <li>Track and synthesize program and operational metrics across the IntServ organization, surfacing patterns and risks to leadership in clear, actionable reporting.</li> <li>Lead after-action reviews following major events and translate findings into durable improvements, continuously raising the operational maturity of the Intelligence Services organization.</li> </ul> <p><strong><span data-contrast="auto">Qualifications</span></strong><span data-contrast="auto">:</span><span data-ccp-props="{}"> </span></p> <ul> <li>5+ years of experience in intelligence operations, security operations, program management, or a closely related field within a cybersecurity or national security context.</li> <li>Demonstrated experience coordinating across multiple technical teams during time-sensitive or high-stakes events — you have been the person who keeps the trains running when things get complex.</li> <li>Familiarity with ICS/OT cybersecurity concepts, threat intelligence fundamentals, and the threat landscape facing critical infrastructure sectors.</li> <li>Experience managing external partner or stakeholder relationships in a structured, compliance-aware context — agreements, information sharing frameworks, and TLP protocols.</li> <li>Experience working with or within government cybersecurity entities, ISACs, or similar public-private partnership structures.</li> <li>Process-builder mindset: you create clarity out of ambiguity, document things that live only in people's heads, and build systems that scale.</li> <li>Comfort operating across multiple simultaneous workstreams with competing urgency — you triage effectively and don't lose track of the long-term while managing the immediate.</li> </ul> <p><strong><span data-contrast="auto">Compensation</span></strong><span data-contrast="auto">:</span><span data-ccp-props="{}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Salary: $170,000</span></li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Competitive Equity Package <span data-ccp-props="{" 134233117":false,"134233118":false,"335551550":0,"335551620":0,"335557856":16777215,"335559738":0,"335559739":0}"=""> </span></li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Comprehensive Benefits Plan<span data-ccp-props="{" 134233117":false,"134233118":false,"335551550":0,"335551620":0,"335557856":16777215,"335559738":0,"335559739":0}"=""> </span></li> </ul> <p><span data-ccp-props="{}"> </span></p> <p><span data-contrast="none">#LI-JF1 #LI-REMOTE </span> <span data-ccp-props="{}"> </span></p> <p> </p> <p> </p><div class="content-conclusion"><p>Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.</p></div>

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...