Jobs at Dragos

Analyze sophisticated ICS and critical-infrastructure malware, software, and firmware through advanced reverse engineering and deobfuscation. Develop YARA signatures and novel threat detections, assess operational impact, produce customer-facing technical reports, and improve malware analysis pipelines. Collaborate with detection engineers, threat hunters, and intelligence analysts while advising on complex malware analysis and detection challenges.

Leads complex ICS/OT cybersecurity consulting engagements for critical infrastructure organizations. Responsibilities include architecture reviews, threat assessments, compromise investigations, tabletop exercises, executive briefings, strategic recommendations, engagement governance, research, methodology improvement, thought leadership, mentorship, and customer relationship development. The role advises engineering, operations, and executive stakeholders while influencing security services, detection content, technology, and training.

Build and operate Dragos’s web application, GraphQL and gRPC APIs, and client SDKs. Develop React and TypeScript features, design versioned API contracts, maintain Python, TypeScript, and Go SDKs, and collaborate with Product, Design, and backend engineering. Improve performance, accessibility, observability, security, testing, and code quality while supporting security data at scale.

Plan, deploy, configure, and optimize the Dragos Platform in customer environments, including power plants, substations, manufacturing facilities, and refineries. Collaborate with client teams on network architecture, sensor placement, integrations, upgrades, troubleshooting, and platform monitoring. Provide training, documentation, break/fix support, release walkthroughs, and feedback collection while coordinating with sales, threat intelligence, and threat hunting teams.

Owns end-to-end quote-to-cash and renewal operations in Salesforce CPQ, including deal structuring, pricing governance, approvals, contract validation, order accuracy, and revenue alignment. Partners with Sales, Finance, Legal, Customer Success, and Revenue Operations to protect revenue integrity, reduce errors, support audits, and improve processes, integrations, and automation in a fast-paced SaaS environment.

Build and maintain customer relationships as a technical advisor, driving Dragos Platform adoption and successful cybersecurity deployments. Address technical requests, resolve issues, provide guidance, conduct health checks, track account metrics, identify service and training opportunities, and coordinate with sales, support, engineering, product, and field teams. Requires enterprise cybersecurity experience, ICS/OT knowledge, SOC/SIEM familiarity, and up to 25% travel.

Leads post-sales customer success for APAC clients, managing onboarding, implementation, adoption, success plans, business reviews, retention, churn risk, and expansion opportunities. Serves as the primary customer contact, maintains account records and recovery plans, demonstrates business value, and collaborates with sales, technical account management, professional services, intelligence, and support teams. Requires cybersecurity understanding and the ability to manage complex enterprise relationships.

Drive new enterprise business and revenue growth across Southern Europe by selling Dragos cybersecurity solutions. Build strategic account plans, manage complex multi-stakeholder sales cycles, engage C-level stakeholders, navigate procurement, develop channel and OEM partnerships, forecast pipeline, and communicate ROI. The role focuses on critical infrastructure sectors including energy, manufacturing, and utilities, using consultative selling and frameworks such as MEDDPICC and Value Selling.

Leads OT incident response engagements for industrial customers across Europe, including investigations, threat hunting, triage, compromise assessments, containment, remediation, and incident command. Delivers advisory services such as maturity assessments, tabletop exercises, and IR planning workshops. Mentors responders, improves playbooks and methodologies, supports thought leadership, and manages customer relationships. Requires deep incident response, digital forensics, ICS/OT cybersecurity, consulting, regulatory knowledge, German fluency, and travel up to 40%.

Leads a team building device intelligence and reverse-engineering capabilities for xOT cybersecurity products. Sets technical strategy for device and protocol coverage, establishes documentation and testing standards, drives automation and AI-assisted development, collaborates cross-functionally, supports customer deployments and incident response, and remains hands-on with code reviews, design reviews, and production debugging. The role also owns hiring, mentoring, team growth, and engineering community development.

Manage post-sales relationships for industrial and critical-infrastructure customers, driving onboarding, adoption, satisfaction, retention, and expansion. Develop success plans, monitor account health and churn risk, demonstrate business value, maintain Salesforce records, and collaborate with Sales, Technical Account Management, Professional Services, Intelligence, and Support. The role requires cybersecurity familiarity, strong executive communication, remote independence, and up to 25% travel.

Advise product teams and EU customers on NIS-2 and related OT cybersecurity regulations. Shape product strategy, roadmap priorities, compliance positioning, customer use cases, go-to-market plans, and educational content for critical infrastructure sectors. Represent the company in industry forums, support sales and marketing, track product KPIs, identify EU opportunities, and mentor product managers. The role focuses on energy and other regulated infrastructure environments.

Deliver hands-on, classroom and virtual technical training for customer security and operations teams across APAC. Teach OT/ICS security, Dragos Platform workflows, network visibility, threat detection, vulnerability management, and incident response. Manage technical labs, troubleshoot live issues, adapt instruction for experienced audiences, and collaborate with product and threat intelligence teams. Contribute to curriculum design, content updates, and new training programs while independently managing regional customer engagements and approximately 35% travel.

Serve as a technical bridge between Dragos and federal customers by understanding mission requirements, designing cybersecurity solutions, conducting demonstrations, supporting sales activities, managing proof-of-concept deployments, troubleshooting issues, and responding to proposals and technical inquiries. The role requires federal procurement knowledge, cybersecurity and ICS/OT expertise, active Top Secret clearance, and regular travel up to 50%.

Leads Dragos Public Sector’s post-sales technical team, mentoring subject matter experts and driving customer adoption, operationalization, and measurable platform value. The role manages customer escalations, stakeholder relationships, product feedback, roadmap advocacy, team processes, performance metrics, and AI-enabled improvements. It requires industrial cybersecurity expertise, SIEM experience, advanced network traffic analysis, U.S. citizenship, and willingness to travel up to 25%.

Provide first-line technical support to enterprise customers through email, chat, phone, and ticketing. Triage and resolve common issues, document cases, support upgrades and configuration changes, use AI tools responsibly, escalate complex problems while retaining ownership, and contribute to a peer-reviewed knowledge base. Participate in a weekend on-call rotation approximately once per month.

Manage post-sales customer success for European industrial clients, including onboarding, implementation, adoption, business reviews, renewals, retention, customer health monitoring, and at-risk account recovery. Serve as the customer advocate while collaborating with Sales, Product, Engineering, Professional Services, and Support. The role requires cybersecurity or industrial-sector experience, stakeholder management, regional expertise, and up to 30% travel across Europe.

Conduct early-stage product demonstrations and technical discovery for prospective customers. Partner with business development, marketing, account teams, and senior solution architects to qualify opportunities, provide consultative OT security recommendations, answer product and services inquiries, and maintain demo content, datasets, and lab environments. Share customer insights with product, marketing, and engineering teams. Travel may be required up to 15%.

Manage post-sales customer success for industrial clients across the MEA region. Drive onboarding, implementation, adoption, business reviews, renewals, retention, and account health. Partner with customers to define success criteria, identify expansion opportunities, resolve risks, and execute recovery plans. Collaborate with Sales, Product, Engineering, Professional Services, and Support while traveling up to 30% across the region.

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.