Senior Vulnerability Analyst OT/ICS Security (Remote)

Dragos, Inc.; Northern (KY); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Competitive Equity Package

Job summary

Dragos is seeking a Principal Vulnerability Analyst to autonomously identify research targets, conduct in-depth vulnerability analyses, and author reports that shape industry understanding of threats. You will work with threat intel, engineering, and incident response teams to amplify real-world impact.

You will mentor colleagues, drive methodology development, and help Dragos scale vulnerability research with automation and robust tooling.

Qualifications

• 5+ years developing, deploying, or evaluating vulnerability-related concepts.
• Expertise in embedded or binary reverse engineering for Windows or embedded apps.
• Strong knowledge of binary protocols and low-level networking concepts.
• 3+ years writing customer-facing technical material for decision-makers.
• Deep understanding of vulnerability scoring and OT impact assessment.
• Ability to independently identify targets, plan analyses, and acquire assets.
• Proficiency in software tooling or automation using Python, C#, or similar.

Responsibilities

• Identify novel vulnerabilities in industrial products and assess IT/ICS impact.
• Coordinate disclosure with vendors and produce clear vulnerability reports.
• Develop detection signatures and collaborate with engineering to close gaps.
• Serve as internal SME for threat intel and incident response teams.
• Contribute to vulnerability research roadmap and partner with customers.
• Mentor researchers and testers, and share Dragos expertise publicly.
• Champion automated vulnerability analysis tools to scale research.

Skills

Vulnerability analysis

Reverse engineering

Low-level networking

Customer-facing writing

Python/C# tooling

Autonomy / roadmap planning

Tools

Suricata

YARA

Snort

Zeek

Python

C#

Job description

Dragos is seeking a Principal Vulnerability Analyst to autonomously identify research targets, conduct in-depth vulnerability analyses, and author reports that shape industry understanding of threats. You will work with threat intel, engineering, and incident response teams to amplify real-world impact.

You will mentor colleagues, drive methodology development, and help Dragos scale vulnerability research with automation and robust tooling.