Join the Mission

Fourth Command is seeking an experienced X-IoT Security Analyst to monitor, investigate, and assess cybersecurity risks across operational technology, industrial control systems, IoT, and cyber physical environments.

The role requires a strong understanding of industrial assets, network communications, security events, vulnerabilities, and operational risk. The successful candidate will work with internal teams and customers to identify threats, investigate anomalies, prioritize risks, and improve the security posture of critical operational environments.

• Monitor X-IoT and OT environments for suspicious activity, security events, and operational anomalies.

• Investigate alerts using asset, network, protocol, vulnerability, and threat intelligence data.

• Establish and maintain asset inventories and communication baselines.

• Analyze industrial network traffic and communications between security zones.

• Identify unauthorized assets, connections, configuration changes, and firmware changes.

• Assess vulnerabilities and security exposures in the context of operational risk and business impact.

• Support incident triage, investigation, containment planning, and post incident analysis.

• Prepare clear investigation reports, risk summaries, and remediation recommendations.

• Coordinate with engineering, security operations, incident response, and customer teams.

• Help improve detection rules, investigation procedures, and security monitoring use cases.

• Maintain awareness of emerging threats affecting OT, IoT, and critical infrastructure.

• Bachelor's degree in cybersecurity, computer science, information technology, engineering, or a related field.
• Four to five years of experience in cybersecurity analysis, security operations, network security, or OT security.
• Understanding of OT, ICS, SCADA, IoT, and industrial network environments.
• Familiarity with industrial protocols and technologies such as Modbus, DNP3, OPC, BACnet, IEC 60870 5 104, or similar protocols.
• Experience analyzing network traffic, security alerts, logs, vulnerabilities, and anomalous behavior.
• Knowledge of incident response, vulnerability management, network segmentation, and security controls.
• Familiarity with frameworks such as NIST CSF, IEC 62443, MITRE ATT&CK, or MITRE ATT&CK for ICS.
• Strong analytical, documentation, and communication skills.
• Relevant cybersecurity or OT security certifications are beneficial but not mandatory.

This is a full time, hybrid role requiring regular collaboration with engineering, research, incident response, and customer facing teams. Participation in time sensitive security investigations may occasionally be required.

The ideal candidate is analytical, methodical, and attentive to operational context. They should be comfortable investigating complex security events, communicating risk clearly, and working responsibly in environments where safety, availability, and operational continuity are essential.

Fourth Command is looking for a Software Development Engineer to design, develop, test, and maintain capabilities for X-IoT security platform.

The role involves building reliable and scalable software for asset intelligence, security monitoring, threat detection, risk management, and operational data analysis. The successful candidate will collaborate with product, research, security, and engineering teams to convert complex requirements into secure and maintainable software.

• Design, develop, test, deploy, and maintain software components for the Dawon platform.

• Build scalable services and data processing capabilities for high volume security and operational data.

• Develop APIs, integrations, backend services, and user facing product capabilities.

• Translate product and security requirements into well structured technical solutions.

• Write clean, secure, maintainable, and well documented code.

• Participate in architecture discussions, code reviews, testing, and release planning.

• Diagnose software defects, performance issues, and integration failures.

• Implement automated tests and contribute to continuous integration and delivery processes.

• Apply secure development practices throughout the software development lifecycle.

• Collaborate with security researchers to integrate detection logic and threat intelligence into the platform.

• Improve platform performance, reliability, observability, and maintainability.

• Maintain technical documentation for developed components and integrations.

• Bachelor's degree in computer science, software engineering, information technology, or a related field.
• Three to five years of professional software development experience.
• Strong programming skills in one or more relevant languages.
• Experience with backend development, APIs, databases, distributed systems, or data processing platforms.
• Understanding of data structures, algorithms, software design patterns, and system architecture.
• Experience with version control, automated testing, code reviews, and CI/CD workflows.
• Familiarity with secure coding principles and application security practices.
• Experience with cloud native technologies, containers, microservices, or event driven architectures is beneficial.
• Knowledge of networking, cybersecurity, IoT, or OT environments is an advantage.
• Strong problem solving, communication, and documentation skills.

This is a full time, hybrid role involving close collaboration with product management, security research, quality assurance, and platform engineering teams.

The ideal candidate takes ownership of their work and values security, reliability, and maintainability. They should be comfortable solving complex technical problems, receiving constructive feedback, and contributing to a disciplined engineering culture.

Fourth Command is seeking a Security Research Analyst to research threats, vulnerabilities, adversary techniques, and emerging risks affecting X-IoT, OT, industrial control systems, IoT, and cyber physical environments.

The successful candidate will convert research findings into actionable threat intelligence, detection opportunities, risk insights, and practical guidance for the Dawon platform, customers, and internal teams.

• Research emerging threats and vulnerabilities affecting OT, ICS, IoT, embedded, and cyber physical systems.

• Analyze advisories, malware reports, threat actor activity, vulnerability disclosures, and industry intelligence.

• Evaluate the potential operational impact and exploitability of vulnerabilities in controlled environments.

• Develop threat intelligence reports, technical advisories, research notes, and risk summaries.

• Map observed behaviors and attack techniques to relevant security frameworks.

• Work with engineering teams to translate research into detections, analytics, and product improvements.

• Support the creation and validation of detection logic and security monitoring use cases.

• Track vendor advisories, vulnerability databases, and industry specific threat developments.

• Maintain structured research records and supporting evidence.

• Support incident investigations with technical research and threat context.

• Communicate findings clearly to both technical and non technical audiences.

• Follow responsible disclosure and ethical research practices.

• Bachelor's degree in cybersecurity, computer science, information technology, engineering, or a related discipline.
• Three to five years of experience in security research, threat intelligence, vulnerability analysis, malware analysis, or security operations.
• Strong understanding of network security, operating systems, common attack techniques, and vulnerability concepts.
• Familiarity with OT, ICS, IoT, embedded systems, or industrial network architectures.
• Experience using controlled research and analysis environments.
• Familiarity with frameworks and resources such as MITRE ATT&CK, MITRE ATT&CK for ICS, CVE, CVSS, CWE, NIST, and IEC 62443.
• Ability to analyze technical information and produce clear, evidence based conclusions.
• Strong technical writing, documentation, and communication skills.
• Familiarity with scripting, data analysis, reverse engineering, or protocol analysis is beneficial.
• Relevant security certifications are an advantage but not mandatory.

This is a full time, hybrid role. Controlled laboratory analysis may be required depending on the research assignment. All research must be performed in accordance with Dawon's legal, ethical, and responsible disclosure requirements.

The ideal candidate is curious, evidence driven, and committed to responsible security research. They should be able to examine complex technical issues, challenge assumptions, and communicate findings accurately without overstating risk.

Fourth Command is looking for an X-IOT Governance, Risk, and Compliance Consultant to help customers assess cybersecurity risks, establish security governance, and meet regulatory and industry requirements across operational environments.

The role involves conducting assessments, identifying control gaps, developing risk treatment plans, and helping organizations improve the security and resilience of their X-IOT, and critical infrastructure systems.

• Conduct X-IOT cybersecurity risk, maturity, compliance, and control assessments.

• Review X-IOT architectures, asset management practices, network segmentation, access controls, monitoring capabilities, and incident response procedures.

• Evaluate customer environments against applicable standards, regulations, and industry frameworks.

• Identify control gaps and develop practical, risk based remediation recommendations.

• Create governance documents, policies, standards, procedures, control matrices, and assessment reports.

• Facilitate stakeholder interviews, workshops, and evidence gathering activities.

• Develop cybersecurity roadmaps, risk registers, and prioritized improvement plans.

• Support audit readiness, regulatory compliance, and security assurance initiatives.

• Assist with third party risk, supply chain risk, and remote access governance.

• Support the development and testing of X-IOT incident response plans and playbooks.

• Present assessment findings and recommendations to technical teams, business stakeholders, and senior leadership.

• Coordinate with Dawon's security analysts, incident responders, and platform specialists.

• Bachelor's degree in cybersecurity, information technology, engineering, risk management, or a related field.
• Four to five years of experience in cybersecurity governance, risk, compliance, audit, consulting, or OT security.
• Knowledge of X-IOT systems, and critical infrastructure environments.
• Working knowledge of standards and frameworks such as IEC 62443, NIST CSF, NIST SP 800 82, ISO/IEC 27001, and applicable sector specific requirements.
• Experience conducting risk assessments, control assessments, gap analyses, or compliance reviews.
• Ability to develop clear policies, procedures, reports, risk registers, and remediation plans.
• Strong stakeholder management, workshop facilitation, and presentation skills.
• Ability to translate technical risks into business and operational impact.
• Relevant certifications in cybersecurity, risk, audit, or industrial security are beneficial.
• Willingness to travel to customer facilities when required.

This is a full time, hybrid role that includes customer meetings, workshops, assessments, and periodic travel to customer facilities. The consultant must follow all applicable safety, security, confidentiality, and access requirements.

The ideal candidate combines technical understanding with strong business judgment. They should be professional, objective, and capable of recommending controls that improve cybersecurity without unnecessarily affecting operational safety, availability, or productivity.

Fourth Command is seeking a Sales Specialist to support the growth of Dawon platform and related cybersecurity services.

The successful candidate will identify opportunities, understand customer security requirements, coordinate product demonstrations, and manage opportunities throughout the sales process. This role requires an understanding of enterprise technology sales and the ability to communicate the business value of cybersecurity solutions to technical and executive stakeholders.

• Identify and develop new business opportunities for Dawon's platform and services.

• Engage prospective customers to understand their operational security challenges, priorities, and procurement requirements.

• Manage qualified opportunities throughout the sales cycle, from initial engagement to commercial closure.

• Deliver clear and relevant presentations on Dawon's capabilities and business value.

• Coordinate product demonstrations, technical discussions, workshops, and proof of value activities.

• Work with technical, product, consulting, and leadership teams to develop suitable customer proposals.

• Prepare proposals, presentations, quotations, commercial documentation, and responses to customer requests.

• Maintain accurate records of customer interactions, opportunities, forecasts, and follow up activities.

• Develop relationships with customers, partners, consultants, and other relevant industry stakeholders.

• Support customer events, industry conferences, webinars, and market outreach initiatives.

• Monitor market developments, customer needs, competitor activity, and industry trends.

• Contribute to account planning, pipeline development, forecasting, and revenue objectives.

• Support a smooth transition from sales engagement to customer onboarding and account management.

• Bachelor's degree in business, marketing, technology, engineering, cybersecurity, or a related field.
• Three to five years of experience in B2B sales, enterprise software, cybersecurity, industrial technology, or professional services.
• Understanding of consultative and solution based selling.
• Ability to understand customer requirements and communicate technical value in clear business language.
• Experience managing sales opportunities, customer meetings, proposals, and commercial follow ups.
• Familiarity with cybersecurity, X-IoT systems, industrial automation, or critical infrastructure is highly beneficial.
• Strong presentation, negotiation, relationship management, and written communication skills.
• Experience working with CRM platforms, sales pipelines, forecasts, and reporting tools.
• Ability to collaborate effectively with technical and customer facing teams.
• Willingness to travel for customer meetings, events, and business development activities.

This is a full time, hybrid role involving regular customer engagement and periodic travel. The role requires effective coordination with internal product, engineering, consulting, and leadership teams.

The ideal candidate is proactive, consultative, and focused on building long term customer relationships. They should be able to understand complex security requirements, communicate honestly, and represent Dawon with professionalism throughout the sales process.