Principal Vulnerability Analyst

Dragos

Remote regions

US

Salary range

$170,000–$170,000/yr

Benefits

Similar Jobs

See all

About the Role:

  • You'll identify novel security gaps in industrial control systems that power plants, water utilities, and manufacturing facilities depend on.
  • You'll operate with high autonomy to identify research targets, perform in-depth vulnerability analysis, coordinate with affected vendors, and author vulnerability reports.
  • You'll partner across threat intelligence, product engineering, and incident response teams to amplify the real-world impact of your work.

Responsibilities:

  • Identify novel vulnerabilities in industrial products and control systems through strategic acquisition and rigorous analysis, assessing operational impact on both IT and ICS environments.
  • Coordinate responsible disclosure with affected vendors and author clear, technically rigorous vulnerability reports for internal customers and public publication.
  • Develop detection signatures (Suricata, YARA, internal analytics) and partner with product engineering to identify and close gaps in the Dragos Platform's vulnerability detection capabilities.

Qualifications:

  • 5+ years developing, deploying, or evaluating proof-of-concept code related to vulnerabilities.
  • Demonstrable expertise in embedded systems reverse engineering or binary reverse engineering of Windows and/or embedded applications.
  • Strong familiarity with binary network protocols and low-level networking concepts.

Dragos

Dragos is the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services to protect critical infrastructure. The company is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC, built on authenticity, transparency, and trust.

Apply for This Position