Teams at Dragos

Analyze sophisticated ICS and critical-infrastructure malware, software, and firmware through advanced reverse engineering and deobfuscation. Develop YARA signatures and novel threat detections, assess operational impact, produce customer-facing technical reports, and improve malware analysis pipelines. Collaborate with detection engineers, threat hunters, and intelligence analysts while advising on complex malware analysis and detection challenges.

Leads complex ICS/OT cybersecurity consulting engagements for critical infrastructure organizations. Responsibilities include architecture reviews, threat assessments, compromise investigations, tabletop exercises, executive briefings, strategic recommendations, engagement governance, research, methodology improvement, thought leadership, mentorship, and customer relationship development. The role advises engineering, operations, and executive stakeholders while influencing security services, detection content, technology, and training.

Build and operate Dragos’s web application, GraphQL and gRPC APIs, and client SDKs. Develop React and TypeScript features, design versioned API contracts, maintain Python, TypeScript, and Go SDKs, and collaborate with Product, Design, and backend engineering. Improve performance, accessibility, observability, security, testing, and code quality while supporting security data at scale.