Senior Vulnerability Analyst

Job not on LinkedIn

🔥 11 minutes ago

🇺🇸 United States – Remote

💵 $122k / year

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Dragos, Inc.

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2016

🏭 Manufacturing

📦 Logistics

💼 Consulting

💰 $74M Series D - Dragos on 2023-09

Manufacturing • Logistics • Consulting

Dragos, Inc. is a cybersecurity company specializing in operational technology (OT) and industrial control systems (ICS) protection for critical infrastructure. It provides an OT-native platform that delivers asset visibility, vulnerability management, threat detection, and response playbooks, backed by threat intelligence, managed services (including OT Watch and incident response), training, and compliance support. Dragos focuses on defending sectors like energy, utilities, manufacturing, transportation, and other industrial environments through a combination of software, intelligence, and expert services.

📋 Description

• Evaluate vulnerability disclosures from CVE, NVD, CISA KEV, vendor advisories, and other public sources • Monitor emerging feeds to ensure timely coverage and assess relevance and impact to OT environments • Curate and prioritize vulnerabilities based on asset criticality, exploitability, and operational impact to industrial systems • Enrich vulnerability data by mapping affected products, firmware versions, and asset classifications • Translate technical vulnerability details into actionable, OT-contextualized content for the Dragos platform • Create advisories, asset mappings, and mitigation guidance • Leverage platform telemetry and maintain product catalogs to identify detection gaps and improve content accuracy • Mentor junior analysts through technical guidance and quality review • Collaborate with engineering teams on content workflows and validation processes • Contribute to continuous improvement of team processes, content standards, and analysis methodologies

🎯 Requirements

• 4+ years of experience in vulnerability analysis, vulnerability management, or a related technical security discipline • Strong understanding of how vulnerabilities originate and work, with ability to analyze them and provide clear remediation and mitigation guidance • Strong understanding of the CVE lifecycle, CVSS scoring, CPE, and vulnerability advisory interpretation • Working knowledge of vulnerability databases, threat intelligence feeds, and security content platforms • Ability to map vulnerabilities to affected products, firmware versions, and asset inventories • Basic scripting proficiency in Python or a similar language for querying databases and generating signatures • Familiarity with command-line tooling and git workflows • Comfort using AI tools such as Claude in day-to-day work • Strong written and verbal communication skills • Self-driven approach to work and ability to produce clear, accurate, actionable technical content • Background in asset management or critical infrastructure sectors is a plus • Must pass a background check as a condition of employment

🏖️ Benefits

• Competitive Equity Package • Comprehensive Benefits Plan

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume