Remote Senior OT Vulnerability Intelligence Analyst

Dragos; United States; Remoto; USD 120.000 - 180.000; Tempo integral

Benefícios oferecidos por esta vaga

Competitive Equity Package

Resumo da vaga

Dragos is seeking an experienced Senior Vulnerability Analyst to join our Vulnerability Analysis Content Team. You will transform vulnerability data from public sources into actionable OT-focused intelligence, evaluating, enriching, and contextualizing CVEs and advisories for our customers.

You will collaborate with engineers, mentor junior analysts, and help shape content standards and workflows while delivering timely, accurate vulnerability content for industrial infrastructure.

Qualificações

• 4+ years of experience in vulnerability analysis, vulnerability management, or a related technical security discipline.
• Strong understanding of CVE lifecycle, CVSS, CPE, and vulnerability advisory interpretation.
• Ability to map vulnerabilities to affected products, firmware versions, and asset inventories.
• Basic scripting ability to handle data at scale (Python or similar).

Responsabilidades

• Evaluate vulnerability disclosures from CVE, NVD, CISA KEV, vendor advisories, and other sources.
• Curate and prioritize vulnerabilities based on asset criticality and operational impact.
• Enrich vulnerability data by mapping affected products and firmware versions.
• Translate vulnerability details into actionable, OT-contextualized content for the Dragos platform.
• Mentor junior analysts and participate in content validation and process improvements.

Conhecimentos

Vulnerability analysis

Python scripting

Technical writing

Mentoring

Ferramentas

Git workflows

Command-line tooling

AI tools (Claude)

Descrição da vaga

Dragos is seeking an experienced Senior Vulnerability Analyst to join our Vulnerability Analysis Content Team. You will transform vulnerability data from public sources into actionable OT-focused intelligence, evaluating, enriching, and contextualizing CVEs and advisories for our customers.

You will collaborate with engineers, mentor junior analysts, and help shape content standards and workflows while delivering timely, accurate vulnerability content for industrial infrastructure.