Senior Vulnerability Analyst, ICS/OT Threat Hunter

Dragos, Inc.; United States; On-site; USD 153,000 - 187,000; Full time

Benefits offered by this job

Equity package

Benefits plan

Job summary

Dragos, Inc. is seeking a Principal Vulnerability Analyst to advance our industrial control system security posture. You will identify novel vulnerabilities, coordinate responsible disclosure, and help develop detection capabilities across the Dragos Platform.

You will mentor researchers, collaborate with threat intelligence and incident response teams, and shape the strategic vulnerability research roadmap for customers and partners.

Qualifications

• 5+ years in vulnerability research or related field.
• Expertise in embedded systems reverse engineering.
• Experience with OT/ICS protocols and vulnerability scoring.
• Proven ability to communicate findings to executives and customers.

Responsibilities

• Identify vulnerabilities in industrial products and ICS, assess IT/OT impact.
• Coordinate disclosure with vendors and produce clear vulnerability reports.
• Develop detection signatures and work with product engineering to close gaps.
• Mentor researchers, drive methodology, and contribute to Dragos Platform.
• Advise on vulnerability research roadmap and defend collective security.
• Lead public reporting and industry engagement.
• Champion automation to scale research work.

Skills

Vulnerability analysis

Embedded reverse engineering

Binary network protocols

Technical writing

Automation tooling (Python/C#)

Tools

Python

C#

Suricata

YARA

Zeek

Job description

Dragos, Inc. is seeking a Principal Vulnerability Analyst to advance our industrial control system security posture. You will identify novel vulnerabilities, coordinate responsible disclosure, and help develop detection capabilities across the Dragos Platform.

You will mentor researchers, collaborate with threat intelligence and incident response teams, and shape the strategic vulnerability research roadmap for customers and partners.