Senior Vulnerability Analyst

Dragos

1d•Remote

About The Position

Dragos is seeking an experienced Senior Vulnerability Analyst to join its Vulnerability Analysis Content Team. The role transforms vulnerability data from public sources into actionable intelligence tailored to operational technology (OT) environments. Working with analysts and engineers, the analyst evaluates, curates, enriches, and contextualizes information from CVEs, NVD, vendor advisories, and other sources to produce high-quality findings for customers. The role supports Dragos’s mission to safeguard industrial infrastructure by delivering timely, accurate, OT-relevant vulnerability intelligence.

Requirements

At least 4 years of experience in vulnerability analysis, vulnerability management, or a related technical security discipline.
Strong understanding of how vulnerabilities originate and work, and ability to analyze them and provide clear remediation and mitigation guidance.
Strong understanding of the CVE lifecycle, CVSS scoring, CPE, and vulnerability advisory interpretation.
Working knowledge of vulnerability databases, threat intelligence feeds, and security content platforms.
Demonstrated ability to map vulnerabilities to affected products, firmware versions, and asset inventories.
Basic scripting proficiency in Python or a similar language to handle data at scale, such as querying databases and generating signatures.
Familiarity with command-line tooling and git workflows.
Comfort using AI tools such as Claude in day-to-day work to improve analysis, content creation, and workflow efficiency.
Strong written and verbal communication skills, a self-driven approach to work, and ability to produce clear, accurate, actionable technical content.

Nice To Haves

Background in asset management or critical infrastructure sectors such as energy, manufacturing, water, or transportation.

Responsibilities

Evaluate vulnerability disclosures from CVE, NVD, CISA KEV, vendor advisories, and other public sources; monitor emerging feeds for timely coverage and assess relevance and impact to OT environments.
Curate and prioritize vulnerabilities based on asset criticality, exploitability, and operational impact to industrial systems.
Enrich vulnerability data by mapping affected products, firmware versions, and asset classifications.
Translate technical vulnerability details into actionable, OT-contextualized content for the Dragos platform, including advisories, asset mappings, and mitigation guidance.
Use platform telemetry and maintain product catalogs to identify detection gaps, prioritize coverage, and improve content accuracy.
Mentor junior analysts through technical guidance and quality review of content outputs.
Collaborate with engineering teams on content creation workflows and validation processes.
Contribute to continuous improvement of team processes, content standards, and analysis methodologies.