Principal Vulnerability Analyst

Dragos
United States
Workplace: RemoteFull timeUSD 170,000+Function: Communications, PR & CommunitySkills: ["Autonomy","Collaboration","Mentorship","Technical communication","Independent problem-solving"]

Conduct in-depth vulnerability research on industrial control systems, identifying novel weaknesses and assessing their operational impact. Own responsible disclosure by coordinating with vendors and producing technically rigorous vulnerability reports. Build and improve detection capabilities using tools like Suricata and YARA, and partner with engineering, threat intelligence, and incident response to translate findings into actionable intelligence. Mentor vulnerability researchers and penetration testers while scaling analysis workflows with automation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Dragos
Dragos
4 days ago

Principal Vulnerability Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 32 minutes agoStatus: Live

Job Summary

Conduct in-depth vulnerability research on industrial control systems, identifying novel weaknesses and assessing their operational impact. Own responsible disclosure by coordinating with vendors and producing technically rigorous vulnerability reports. Build and improve detection capabilities using tools like Suricata and YARA, and partner with engineering, threat intelligence, and incident response to translate findings into actionable intelligence. Mentor vulnerability researchers and penetration testers while scaling analysis workflows with automation.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Communications, PR & Community
Seniority: Sr. Manager level

Key Responsibilities

  • •Identify novel vulnerabilities in industrial products and control systems through acquisition and rigorous analysis, assessing operational impact across IT and ICS.
  • •Coordinate responsible disclosure with vendors and author technically rigorous vulnerability reports for internal customers and public publication.
  • •Develop detection signatures using Suricata, YARA, and internal analytics, partnering with product engineering to improve vulnerability detection capabilities.
  • •Assess in-the-wild exploits and analyze vulnerability trends, integrating findings into broader threat intelligence with incident response and threat intelligence teams.
  • •Mentor other researchers and penetration testers, communicate expertise through reporting and presentations, and champion automated vulnerability analysis workflows.

Pay and Benefits

Salary: USD 170,000
Equity and Bonus:Equity
Perks:Equity

Key Requirements

  • •5+ years developing, deploying, or evaluating proof-of-concept code related to vulnerabilities.
  • •Expertise in embedded systems reverse engineering or binary reverse engineering of Windows and/or embedded applications.
  • •Strong familiarity with binary network protocols and low-level networking concepts.
  • •3+ years writing customer-facing technical material and translating complex details for decision-makers and operators.
  • •Demonstrated ability to develop vulnerability-analysis tooling or automation using Python, C#, or similar languages.
Skills:AutonomyCollaborationMentorshipTechnical communicationIndependent problem-solving
Languages:English
Tech Stack:PythonC#SuricataYARASnortZeekWindowsModbusDNP3Profibus

Company Brief

Dragos
Provides industrial cybersecurity solutions protecting operational technology (OT) and industrial control systems (ICS) with threat detection, incident response, and asset visibility to secure critical infrastructure and manufacturing environments.
Industry: Cybersecurity
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series D
Headquarters: Washington, D.C., United States
Founded: 2016
WebsiteLinkedIn