Principal Vulnerability Analyst

Job Summary

Operating remotely, the full-time Principal Vulnerability Analyst will identify and analyze vulnerabilities in industrial control systems, coordinate responsible disclosures, and develop detection signatures while mentoring team members and contributing to strategic vulnerability management.

Key responsibilities

• Identify novel vulnerabilities in industrial products and control systems through rigorous analysis and assess operational impact
• Coordinate responsible disclosure with vendors and author clear, technically rigorous vulnerability reports
• Develop detection signatures and collaborate with product engineering to enhance the Dragos Platform's vulnerability detection capabilities

Required qualifications

• 5+ years of experience developing or evaluating proof-of-concept code related to vulnerabilities
• Demonstrable expertise in embedded systems reverse engineering or binary reverse engineering of applications
• Strong familiarity with binary network protocols and low-level networking concepts
• 3+ years of experience writing customer-facing technical material
• In-depth understanding of vulnerability scoring mechanisms and their operational impact in OT contexts