Track Manager (Support & Operations)

Experience: Not Available to Not Available years

Location: Noida, India

Skills: Threat Management, Advanced Threat Hunting, Vulnerability Management, Asset Tagging, Risk Scoring, ICS/OT attack techniques, MITRE ATT&CK; for ICS, Dragos threat groups, OT vulnerability management, Dragos vulnerability intelligence, OT architecture, Purdue model, ISA/IEC-62443 mapping

Job Summary
Operations Management for complex /large projects with focus on continuous improvement, problem-solving, meeting client SLAs, and empowering teams through effective people management.

Key Responsibilities
1. Improve the operational systems, processes and policies in support of organizations mission - specifically, support better management reporting, information flow and management, business process and organizational planning
2. Understand client requirements and accountable in ensuring support team is meeting client expectations
3. To lead and mentor the project team and ensure transparent communication of project goals.
4. Bringing new ideas and innovation for process development and overall organizational progress.
5. To provide solutions commensurate with the customers’ needs within the ambit of the given environment so as to lead to business results.

Skill Requirements
Based on your context (CLW account, OT focus, Dragos platform) and the enterprise artefacts found, below is a clear, L3‑ready skill definition for Dragos – JDE covering Threat, Vulnerability Management, Asset Tagging, and Risk Scoring. This is aligned with how these capabilities are already referenced in OT security decks, and Dragos readiness discussions within your environment.

Dragos L3 Skill – JDE (Threat, Vulnerability Management, Asset Tagging & Risk Scoring)
1. Threat Management & Advanced Threat Hunting (Dragos – L3)
Core Responsibilities Lead advanced OT threat hunting activities using Dragos intelligence mapped to OT risk inputs and production‑critical assets. Perform deep‑dive investigation on high‑confidence Dragos alerts (ICS malware, lateral movement, abnormal OT protocol behavior). Correlate Dragos detections with asset criticality, Purdue levels, and business impact before escalation. Own L3 investigation closure, evidence validation, and final threat assessment for OT incidents. Provide risk‑based recommendations to OT operations and security leadership.
Expected L3 Depth Strong understanding of ICS/OT attack techniques, MITRE ATT&CK; for ICS, and Dragos threat groups. Ability to distinguish false positives vs real OT threats using protocol, traffic pattern, and asset behavior analysis. Mentor SOC L2 teams on Dragos‑specific investigations.

2. OT Vulnerability Management (Dragos‑Led, Risk‑Based)




Core Responsibilities Drive non‑intrusive OT vulnerability management aligned to constraints (no active scanning in production OT). Use Dragos vulnerability intelligence to: Identify exposed firmware, insecure configurations, and known OT CVEs. Correlate vulnerabilities with asset role, exposure, and production impact. Support risk‑based remediation prioritization instead of CVSS‑only scoring. Coordinate with resolver groups (OT Ops, Engineering, IT Security) for exception handling and remediation planning. Contribute to vulnerability governance artifacts and runbooks.
Expected L3 Depth Ability to explain why a vulnerability matters operationally, not just technically. Experience in OT patch constraints, compensating controls, and exception workflows.

3. Asset Discovery, Tagging & Context Enrichment (Dragos)
Core Responsibilities Own Dragos asset inventory accuracy for OT environments. Define and enforce standardized asset tagging: Site / Zone, Purdue Level (0–5), Asset Type (PLC, HMI, Server, Switch, etc.), Operational vs Non‑Operational, Business / Safety Criticality. Ensure enrichment of: Vendor, model, firmware, Network attributes (VLAN, subnet), Logical and physical location. Maintain process for continuous asset updates (new devices, firmware changes).
Expected L3 Depth Deep understanding of OT architecture, Purdue model, and ISA/IEC‑62443 mapping. Ability to translate raw Dragos discoveries into actionable, business‑aligned inventory.

4. Risk Scoring & Business Impact Alignment
Core Responsibilities Lead risk scoring methodology combining: Threat likelihood (Dragos intelligence), Asset criticality (safety, reliability, production), Exposure and vulnerability context. Support risk registers, exception forms, and governance reviews with defensible risk narratives. Enable executive‑level reporting: High‑risk assets, Top OT risks, Remediation priority list.
Expected L3 Depth Ability to defend risk scores during audits, client reviews, and leadership forums. Strong articulation of business risk vs technical findings.

5. Governance, Documentation & Leadership
Core Responsibilities Own Dragos‑related sections of: OT SOC runbooks, Threat hunting reports, Vulnerability governance artifacts.
Other Requirements Based on your context (CLW account, OT focus, Dragos platform) and the enterprise artefacts found, below is a clear, L3‑ready skill definition for Dragos – JDE covering Threat, Vulnerability Management, Asset Tagging, and Risk Scoring. This is aligned with how these capabilities are already referenced in OT security decks,



and Dragos readiness discussions within your environment.
Dragos L3 Skill – JDE (Threat, Vulnerability Management, Asset Tagging & Risk Scoring)
1. Threat Management & Advanced Threat Hunting (Dragos – L3)
Core Responsibilities Lead advanced OT threat hunting activities using Dragos intelligence mapped to OT risk inputs and production‑critical assets. Perform deep‑dive investigation on high‑confidence Dragos alerts (ICS malware, lateral movement, abnormal OT protocol behavior). Correlate Dragos detections with asset criticality, Purdue levels, and business impact before escalation. Own L3 investigation closure, evidence validation, and final threat assessment for OT incidents. Provide risk‑based recommendations to OT operations and security leadership.
Expected L3 Depth Strong understanding of ICS/OT attack techniques, MITRE ATT&CK; for ICS, and Dragos threat groups. Ability to distinguish false positives vs real OT threats using protocol, traffic pattern, and asset behavior analysis. Mentor SOC L2 teams on Dragos‑specific investigations.
2. OT Vulnerability Management (Dragos‑Led, Risk‑Based)
Core Responsibilities Drive non‑intrusive OT vulnerability management aligned to constraints (no active scanning in production OT). Use Dragos vulnerability intelligence to: Identify exposed firmware, insecure configurations, and known OT CVEs. Correlate vulnerabilities with asset role, exposure, and production impact. Support risk‑based remediation prioritization instead of CVSS‑only scoring. Coordinate with resolver groups (OT Ops, Engineering, IT Security) for exception handling and remediation planning. Contribute to vulnerability governance artifacts and runbooks.
Expected L3 Depth Ability to explain why a vulnerability matters operationally, not just technically. Experience in OT patch constraints, compensating controls, and exception workflows.
3. Asset Discovery, Tagging & Context Enrichment (Dragos)
Core Responsibilities Own Dragos asset inventory accuracy for OT environments. Define and enforce standardized asset tagging: Site / Zone, Purdue Level (0–5), Asset Type (PLC, HMI, Server, Switch, etc.), Operational vs Non‑Operational, Business / Safety Criticality. Ensure enrichment of: Vendor, model, firmware, Network attributes (VLAN, subnet), Logical and physical location. Maintain process for continuous asset updates (recent devices, firmware changes).
Expected L3 Depth Deep understanding of OT architecture, Purdue model, and ISA/IEC‑62443 mapping. Ability to translate raw Dragos discoveries into actionable, business‑aligned inventory.
4. Risk Scoring & Business Impact Alignment
Core Responsibilities Lead risk scoring methodology combining: Threat likelihood (Dragos intelligence), Asset criticality (safety, reliability, production), Exposure and vulnerability context.

📌 Track Manager (Support & Operations) (Noida)
🏢 HCL Technologies
📍 Noida