Senior Vulnerability Analyst

Joins the Vulnerability Analysis Content Team at Dragos, turning public vulnerability data into intelligence for operational technology environments. The analyst assesses disclosures from CVE, NVD, CISA KEV and vendor advisories, prioritises them by exploitability and operational impact, maps affected products and firmware, writes advisories and mitigation guidance for the Dragos platform, and mentors junior analysts.

The company wants four or more years in vulnerability analysis or management, strong knowledge of the CVE lifecycle, CVSS and CPE, basic Python scripting, git and command-line skills, and comfort using AI tools. A background in critical infrastructure sectors or asset management is a plus.