Senior Capabilities Developer: Synapse & Threat Intel

Dragos, Inc.; Northern (KY); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Competitive Equity Package

Job summary

Dragos is seeking a Senior Capabilities Developer to build and maintain Synapse collection pipelines, write Storm queries, and shape data models that power OT threat intelligence. You will collaborate with cross-functional teams to scale collection across threat groups and activities.

This remote-first role offers opportunities to contribute to WorldView, Year in Review, and Intelligence Services outputs while improving data quality and automation.

Qualifications

• 3+ years in cyber threat intelligence, detection engineering, or related cybersecurity discipline.
• Proficient with Synapse/Storm for analytical queries and data workflows.
• Experience troubleshooting analytical tooling and scripts.
• Understanding of Synapse hypergraph data model, forms and tag structures.
• Familiarity with telemetry and malware analysis tools for threat hunting.
• Ability to write design docs and collaborate across teams.

Responsibilities

• Build and maintain Synapse collection pipelines through Storm queries, automation, data models, and tag hierarchies.
• Diagnose and resolve complex defects in Synapse tooling and collection systems.
• Support threat hunting and adversary tracking across multiple threat groups.
• Contribute analysis to recurring intelligence outputs with properly modeled data.
• Ensure data quality and close visibility gaps via validation and automation.
• Document designs, improve processes, and share knowledge across the team.
• Collaborate with hunt, research, intelligence, product, and engineering teams.

Skills

Synapse/Storm query language

Threat intelligence

Data modeling

Automation

Cross-functional collaboration

Documentation

Job description

Dragos is seeking a Senior Capabilities Developer to build and maintain Synapse collection pipelines, write Storm queries, and shape data models that power OT threat intelligence. You will collaborate with cross-functional teams to scale collection across threat groups and activities.

This remote-first role offers opportunities to contribute to WorldView, Year in Review, and Intelligence Services outputs while improving data quality and automation.