Senior Vulnerability Analyst

Dragos, Inc.

. Evaluate vulnerability disclosures from CVE, NVD, CISA KEV, vendor advisories, and other public sources .

Posted 11/4/2026full-timeRemote • United StatesSenior💰 $122,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability analysis and management, with a strong understanding of the CVE lifecycle, CVSS scoring, and the ability to translate technical details into actionable content. Proficient in using scripting languages like Python for database queries and familiar with security content platforms and threat intelligence feeds.

Highest-signal resume keywords

Vulnerability AnalysisCVE Lifecycle UnderstandingPython Scripting ProficiencyThreat Intelligence FeedsTechnical Content Creation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementCVE LifecycleCVSS ScoringCPE MappingVulnerability Advisory InterpretationDatabase QueryingAsset MappingMitigation GuidanceCommand-Line ToolingGit Workflows

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationSelf-Driven ApproachMentoring

Tools & Technologies

Dragos PlatformAI ToolsSecurity Content PlatformsVulnerability Databases

Industry Keywords

Operational TechnologyCritical InfrastructureAsset ManagementVulnerability Disclosure

Tech Stack

Tools & technologies

Python

About the role

Key responsibilities & impact

Evaluate vulnerability disclosures from CVE, NVD, CISA KEV, vendor advisories, and other public sources
Monitor emerging feeds to ensure timely coverage and assess relevance and impact to OT environments
Curate and prioritize vulnerabilities based on asset criticality, exploitability, and operational impact to industrial systems
Enrich vulnerability data by mapping affected products, firmware versions, and asset classifications
Translate technical vulnerability details into actionable, OT-contextualized content for the Dragos platform
Create advisories, asset mappings, and mitigation guidance
Leverage platform telemetry and maintain product catalogs to identify detection gaps and improve content accuracy
Mentor junior analysts through technical guidance and quality review
Collaborate with engineering teams on content workflows and validation processes
Contribute to continuous improvement of team processes, content standards, and analysis methodologies

Requirements

What you’ll need

4+ years of experience in vulnerability analysis, vulnerability management, or a related technical security discipline
Strong understanding of how vulnerabilities originate and work, with ability to analyze them and provide clear remediation and mitigation guidance
Strong understanding of the CVE lifecycle, CVSS scoring, CPE, and vulnerability advisory interpretation
Working knowledge of vulnerability databases, threat intelligence feeds, and security content platforms
Ability to map vulnerabilities to affected products, firmware versions, and asset inventories
Basic scripting proficiency in Python or a similar language for querying databases and generating signatures
Familiarity with command-line tooling and git workflows
Comfort using AI tools such as Claude in day-to-day work
Strong written and verbal communication skills
Self-driven approach to work and ability to produce clear, accurate, actionable technical content
Background in asset management or critical infrastructure sectors is a plus
Must pass a background check as a condition of employment

Benefits

Comp & perks

Competitive Equity Package
Comprehensive Benefits Plan