Principal Vulnerability Analyst

About the role

Dragos is dedicated to protecting critical infrastructure systems that power homes, hospitals, and industries worldwide. This role involves identifying novel security gaps in industrial control systems and translating these findings into actionable intelligence.

Responsibilities

• Identify novel vulnerabilities in industrial products and control systems through strategic acquisition and rigorous analysis, assessing operational impact on both IT and ICS environments.
• Cook responsible disclosure with affected vendors and author clear, technically rigorous vulnerability reports for internal customers and public publication.
• Develop detection signatures (Suricata, YARA, internal analytics) and partner with product engineering to identify and close gaps in the Dragos Platform's vulnerability detection capabilities.
• Serve as a trusted internal resource to threat intelligence and incident response teams, assessing in-the-wild exploits, analyzing vulnerability trends, and integrating findings into broader threat intelligence.
• Contribute to the strategic vulnerability management roadmap and collaborate with customers and strategic partners on vulnerability research projects that advance collective defense.
• Mentor other researchers and penetration testers while communicating Dragos expertise through public reporting, industry presentations, and engagement with the security community.
• Promote the adoption of automated vulnerability analysis tools and processes to scale research capabilities and optimize team workflows.

Qualifications

• 5+ years developing, deploying, or evaluating proof-of-concept code related to vulnerabilities.
• Strong familiarity with binary network protocols and low-level networking concepts.
• In-depth understanding of vulnerability scoring mechanisms, their benefits and limitations in OT context, and measured ability to assess real-world operational impact.
• Demonstrated proficiency developing software tooling or analytical automation using Python, C#, or similar languages to enhance team workflows and scale research.
• Experience reverse engineering malware using static and dynamic analysis tools and techniques, with familiarity of malware code constructs.
• Experience developing YARA, Snort, Suricata or Zeek detections rules.
• Experience working with an operations center and incident response team during live engagements.
• Track record of discovering and responsibly disclosing novel vulnerabilities.
• Familiarity with ICS protocols (Modbus, DNP3, Profibus, etc.) and their security properties.

Nice to haves

• Experience reverse engineering malware using static and dynamic analysis tools and techniques, with familiarity of malware code constructs.
• Experience developing YARA, Snort, Suricata or Zeek detections rules.
• Experience working with an operations center and incident response team during live engagements.
• Track record of discovering and responsibly disclosing novel vulnerabilities.
• Familiarity with ICS protocols (Modbus, DNP3, Profibus, etc.) and their security properties.

Benefits

Comprehensive Benefits Plan

Pay

$200,000 Salary

Schedule

Remote-first

Company Information

Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws.