Senior Software Engineer

Dragos, Inc; United States; On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Competitive Equity Package

Job summary

A cybersecurity company in the United States is looking for a Senior Software Engineer to enhance automation tools for vulnerability analysis. You will design and maintain CI/CD pipelines, develop workflows, and automate tasks for rapid vulnerability intelligence delivery. Ideal candidates will have over 5 years of software development experience, with significant expertise in Python and CI/CD processes. The company offers a competitive equity package and values diversity in its hiring practices.

Qualifications

• 5+ years in a production software development environment.
• 2+ years of experience with Python development.
• 1+ years of experience designing and maintaining CI/CD pipelines.

Responsibilities

• Design, build, and maintain CI/CD pipelines for content review.
• Develop and improve analyst workflows for vulnerability analysis.
• Partner with analysts to automate repetitive tasks.
• Implement automated testing frameworks.
• Collaborate with engineering teams for integration.

Skills

Python development

CI/CD pipeline design

Containerization (Docker, Kubernetes)

Infrastructure-as-Code (Terraform, Ansible)

Cloud platforms (AWS, Azure, GCP)

Developer tooling design

Git workflows

Linux systems administration

Observability tools (Prometheus, Grafana)

Job description

About the Role

Dragos is seeking a highly skilled Senior Software Engineer to join our Vulnerability Analysis content team. The ideal candidate will play a pivotal role in accelerating the delivery of vulnerability findings to our customers through robust automation and tooling.

Collaborating closely with our team of vulnerability analysts, this person will be responsible for designing, building, and maintaining the CI/CD pipeline that powers our analysis review and deployment workflows. This critical function supports the rapid and accurate dissemination of vulnerability intelligence to protect operational technology (OT) environments.

Responsibilities

• Design, build, and maintain CI/CD pipelines for content review, validation, and deployment, including vulnerability analysis, asset catalogs, and report generation.
• Develop and improve analyst workflows and tooling to streamline the vulnerability analysis and publication process.
• Partner with vulnerability analysts to understand pain points and automate repetitive tasks in the content creation lifecycle.
• Implement automated testing frameworks including unit, integration, and end-to-end tests for vulnerability content validation.
• Implement and maintain data validation, schema enforcement, and content quality assurance automation to ensure accuracy and consistency of vulnerability findings.
• Collaborate with other engineering teams to integrate vulnerability content delivery into broader Dragos systems.
• Mentor junior engineers and guide best practices.
• Continuously improve deployment velocity and content quality.

Qualifications

• 5+ years in a production software development environment, with 2+ years of experience with Python development.
• 1+ years of experience designing and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, GitHub Actions, or similar.
• Experience with containerization technologies (Docker, Kubernetes) and infrastructure-as-code (Terraform, Ansible, or similar).
• Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native services.
• Demonstrated ability to design and build developer tooling and workflow automation that improves team productivity.
• Proficiency with git workflows, branching strategies, and code review processes at scale.
• Solid understanding of Linux systems administration and command-line tooling.
• Strong communication skills with the ability to translate technical concepts for non-technical stakeholders.
• Experience working in a security-focused environment or with security content delivery pipelines is a plus.
• ICS/OT knowledge and experience is nice to have.
• Rust knowledge and experience is nice to have.
• Experience with observability tools (Prometheus, Grafana, ELK stack, or similar) is helpful.
• Background in vulnerability management, threat intelligence, or security operations is a bonus.

Compensation

• Competitive Equity Package

Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.