Senior Vulnerability Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Assess vulnerability disclosures from sources such as CVE, NVD, CISA KEV, vendor advisories, and other public platforms.

• Track emerging feeds to guarantee prompt coverage while evaluating their relevance and impact on OT environments.

• Organize and prioritize vulnerabilities based on the criticality of assets, exploitability, and their operational effects on industrial systems.

• Enhance vulnerability data by mapping to affected products, firmware versions, and asset classifications.

• Convert technical vulnerability details into actionable content contextualized for OT within the Dragos platform.

• Develop advisories, asset mappings, and mitigation recommendations.

• Utilize platform telemetry and maintain product catalogs to identify detection gaps and enhance content accuracy.

• Provide mentorship to junior analysts through technical advice and quality reviews.

• Work collaboratively with engineering teams on content workflows and validation methodologies.

• Contribute to the ongoing enhancement of team processes, content standards, and analytical methodologies.

⛳️ Requirements

• A minimum of 4 years of experience in vulnerability analysis, vulnerability management, or a related technical security field.

• A solid understanding of the origins and functions of vulnerabilities, with the ability to analyze them and offer clear remediation and mitigation strategies.

• Strong comprehension of the CVE lifecycle, CVSS scoring, CPE, and the interpretation of vulnerability advisories.

• Practical knowledge of vulnerability databases, threat intelligence feeds, and security content platforms.

• Capability to map vulnerabilities to impacted products, firmware versions, and asset inventories.

• Basic scripting skills in Python or a similar language for querying databases and creating signatures.

• Familiarity with command-line tools and git workflows.

• Comfort in utilizing AI tools such as Claude in daily tasks.

• Excellent written and verbal communication abilities.

• A self-motivated work ethic with the capacity to produce clear, accurate, and actionable technical content.

• Experience in asset management or critical infrastructure sectors is advantageous.

• Must successfully pass a background check as a prerequisite for employment.

🏝️ Benefits

• Competitive Equity Package

• Comprehensive Benefits Plan