At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.
About the Role:
We are seeking a Manager, Product Security Engineering to lead our product security team, which includes the Principal Product Security Engineer, Staff Product Security Engineer, and other product security engineers, while remaining hands-on as a practicing security engineer yourself. This is a working-manager role: roughly half your time will be spent leading, mentoring, and growing your team, and half will be spent as an individual contributor driving certification, accreditation, and hardening efforts such as DISA STIGs, SOC 2, ISO 27001, and other compliance programs our customers and prospects depend on. Your ICs will carry the bulk of day-to-day vulnerability hunting and patching in Dragos products — including finding novel (0-day) issues, not just outdated dependencies — so you can focus on certifications, delivery, and team growth. You'll give the Principal Product Security Engineer latitude to drive technical strategy and PSIRT leadership, while you own people management, career growth, delivery, and cross-functional coordination with Compliance, Legal, and Sales Engineering for the team as a whole.
Responsibilities:
- Manage, mentor, and grow the product security engineering team, including the Principal Product Security Engineer and Staff Product Security Engineer, covering hiring, career development, and performance management
- Personally own and drive certification and accreditation initiatives, including DISA STIG hardening and authorization packages, SOC 2, ISO 27001, and other frameworks required by customers or regulators
- Give the Principal Product Security Engineer room to own technical strategy and PSIRT leadership, while you translate that strategy into an executable roadmap and hold the team accountable to it
- Remain hands-on: contribute directly to vulnerability remediation, SAST/DAST tooling, security assessments, or PSIRT response alongside the team, while trusting your ICs to own the majority of day-to-day vulnerability hunting and patching
- Prioritize and track the team's vulnerability hunting and patching work — including 0-days found in Dragos products, not just dependency CVEs — to keep it aligned with certification deadlines and customer commitments
- Coordinate with Compliance, Legal, and Sales Engineering to respond to customer security questionnaires, audits, and certification renewals
- Track and report on the team's certification posture, audit readiness, and vulnerability remediation SLAs to Engineering leadership
- Establish and maintain evidence collection processes so certifications and accreditations can be renewed and audited efficiently
- Foster a strong technical community by developing close relationships amongst Engineering Managers
Qualifications:
- 5+ years of direct cybersecurity or product security experience
- 1-2+ years of experience managing or leading a team of security engineers, or demonstrated team-lead/player-coach experience
- Direct, hands-on experience obtaining or maintaining compliance certifications (SOC 2 Type II, ISO 27001, FedRAMP, or similar) and/or DISA STIG hardening and authorization processes
- Comfortable operating as a working manager, splitting time between people leadership and individual technical contribution
- Experience with SAST/DAST implementation and integrating security tooling into CI/CD pipelines
- Experience with security in cloud (AWS/Azure/GCP), on-premise, and virtualized environments
- Excellent communication and cross-functional collaboration skills; comfortable representing product security to Compliance, Legal, Sales, and customers
- Management experience with Agile and working in cross-functional Product Teams
- Knowledge of ICS/OT security is a plus
Compensation:
- Salary: $220,000
- Competitive Equity Package
- Comprehensive Benefits Plan
#LI-NH1 #LI-REMOTE
Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.
Skills Required
- 5+ years of direct cybersecurity or product security experience
- 1–2+ years managing or leading a team of security engineers, or demonstrated team-lead/player-coach experience
- Hands-on experience obtaining or maintaining compliance certifications such as SOC 2 Type II, ISO 27001, or FedRAMP, and/or DISA STIG hardening and authorization processes
- Experience operating as a working manager with both people leadership and individual technical contribution
- Experience implementing SAST/DAST and integrating security tooling into CI/CD pipelines
- Experience with security in cloud, on-premises, and virtualized environments
- Excellent communication and cross-functional collaboration skills
- Management experience with Agile and cross-functional Product Teams
- Knowledge of ICS/OT security
Dragos Compensation & Benefits Highlights
-
Wellbeing & Lifestyle Benefits — Remote-first flexibility and work-from-home options are consistently highlighted as standout aspects of the package, and feedback suggests the remote setup is particularly well regarded. Flexible scheduling further supports day-to-day work-life balance.
-
Leave & Time Off Breadth — Flexible/unlimited PTO, paid holidays, and other time-off offerings are described as broad and competitive. Feedback suggests the overall time-off menu compares well with tech-sector norms.
-
Fair & Transparent Compensation — Compensation ranges and the stated value of benefits (e.g., healthcare, 401(k), equity) are included in job postings, aiding apples-to-apples comparisons. Feedback suggests this transparency helps candidates understand total rewards upfront.
Dragos Insights
What We Do
Dragos is an industrial (OT/ICS/IIoT) cybersecurity company on a mission to safeguard civilization. Our integrated software platform provides critical visibility into ICS and OT networks so that threats are identified, and can be addressed before they become significant events, our solutions are optimized for emerging applications like the Industrial Internet of Things (IIoT), enabling our clients in power and water utilities, energy, and manufacturing industries to establish a resilient and adaptable security posture.
Dragos Offices
Remote Workspace
Employees work remotely.
