Senior Vulnerability Analyst
Dragos, Inc.
$122,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.
About the Role:
Dragos is seeking an experienced Senior Vulnerability Analyst to join our Vulnerability Analysis Content Team. The ideal candidate will play a critical role in transforming vulnerability data from public sources into actionable intelligence tailored for operational technology (OT) environments. Working alongside a team of analysts and engineers, you will be responsible for evaluating, curating, enriching, and contextualizing vulnerability information from CVEs, NVD, vendor advisories, and various other sources to deliver high-quality findings to our customers. This role directly supports Dragos's mission to safeguard industrial infrastructure by producing timely, accurate, and OT-relevant vulnerability intelligence.
Responsibilities:
- Evaluate vulnerability disclosures from CVE, NVD, CISA KEV, vendor advisories, and other public sources, and monitor emerging feeds to ensure timely coverage and assess relevance and impact to OT environments.
- Curate and prioritize vulnerabilities based on asset criticality, exploitability, and operational impact to industrial systems.
- Enrich vulnerability data by mapping affected products, firmware versions, and asset classifications to ensure comprehensive coverage.
- Translate technical vulnerability details into actionable, OT-contextualized content for the Dragos platform, including advisories, asset mappings, and mitigation guidance.
- Leverage platform telemetry and maintain product catalogs to identify detection gaps, prioritize coverage, and improve content accuracy.
- Mentor junior analysts by providing technical guidance and quality review of content outputs.
- Collaborate with engineering teams on content creation workflows and validation processes, and contribute to continuous improvement of team processes, content standards, and analysis methodologies.
Qualifications:
- 4+ years of experience in vulnerability analysis, vulnerability management, or a related technical security discipline, with a strong understanding of how vulnerabilities originate and work, and the ability to analyze them and provide clear remediation and mitigation guidance.
- Strong understanding of the CVE lifecycle, CVSS scoring, CPE, and vulnerability advisory interpretation, with working knowledge of vulnerability databases, threat intelligence feeds, and security content platforms.
- Demonstrated ability to map vulnerabilities to affected products, firmware versions, and asset inventories.
- Scripting experience in Python or a similar language (basic proficiency) to handle data at scale, such as querying databases and generating signatures, along with familiarity with command-line tooling and git workflows.
- Comfort using AI tools (e.g., Claude) in day-to-day work to improve analysis, content creation, and workflow efficiency.
- Strong written and verbal communication skills, a self-driven approach to work, and the ability to produce clear, accurate, actionable technical content.
- Background in asset management or critical infrastructure sectors (e.g., energy, manufacturing, water, transportation) is a plus.
Compensation:
- Salary: $122,000
- Competitive Equity Package
- Comprehensive Benefits Plan
#LI-JF1 #LI-REMOTE
Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.
Benefits
- stock options
About this role
Dragos is looking for a Senior Vulnerability Analyst to join a team that transforms raw vulnerability data into intelligence specifically designed for operational technology environments—the systems running power grids, water treatment, hospitals, and other critical infrastructure. You'd evaluate disclosures from CVE, NVD, vendor advisories, and other sources; prioritize them based on real-world OT impact; and enrich that data by mapping affected products and asset types. The work feeds directly into Dragos's platform and customer advisories, so accuracy and OT context matter immediately.
You'll need at least four years in vulnerability analysis or related security work, solid grounding in CVE lifecycle and CVSS scoring, and the ability to map vulnerabilities to specific products and firmware versions. Basic Python scripting is required—enough to query databases and handle data at scale—along with comfort using AI tools like Claude as part of your daily workflow. Strong writing skills are essential since you're translating technical details into actionable guidance for customers. Experience in critical infrastructure sectors is valued but not required.
This is a remote, full-time role at $122,000 with equity and comprehensive benefits. You'd also mentor junior analysts and work with engineering teams on content workflows, so some appetite for collaboration and process improvement helps. If you have the technical foundation and want your vulnerability work to directly protect the systems communities depend on, this role offers that direct line between analysis and impact.
How this employer is doing
average
- Recent Acquisition
In the news
Accenture plc completed the acquisition of an unknown majority stake in Dragos, Inc., marketscreener.com
Pay for this role
$122,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.