Jobs at Dragos

Build and operate Dragos’s web application, GraphQL and gRPC APIs, and client SDKs. Develop React and TypeScript features, design versioned API contracts, maintain Python, TypeScript, and Go SDKs, and collaborate with Product, Design, and backend engineering. Improve performance, accessibility, observability, security, testing, and code quality while supporting security data at scale.

Plan, deploy, configure, and optimize the Dragos Platform in customer environments, including power plants, substations, manufacturing facilities, and refineries. Collaborate with client teams on network architecture, sensor placement, integrations, upgrades, troubleshooting, and platform monitoring. Provide training, documentation, break/fix support, release walkthroughs, and feedback collection while coordinating with sales, threat intelligence, and threat hunting teams.

Owns end-to-end quote-to-cash and renewal operations in Salesforce CPQ, including deal structuring, pricing governance, approvals, contract validation, order accuracy, and revenue alignment. Partners with Sales, Finance, Legal, Customer Success, and Revenue Operations to protect revenue integrity, reduce errors, support audits, and improve processes, integrations, and automation in a fast-paced SaaS environment.

Build and maintain customer relationships as a technical advisor, driving Dragos Platform adoption and successful cybersecurity deployments. Address technical requests, resolve issues, provide guidance, conduct health checks, track account metrics, identify service and training opportunities, and coordinate with sales, support, engineering, product, and field teams. Requires enterprise cybersecurity experience, ICS/OT knowledge, SOC/SIEM familiarity, and up to 25% travel.

Leads a team building device intelligence and reverse-engineering capabilities for xOT cybersecurity products. Sets technical strategy for device and protocol coverage, establishes documentation and testing standards, drives automation and AI-assisted development, collaborates cross-functionally, supports customer deployments and incident response, and remains hands-on with code reviews, design reviews, and production debugging. The role also owns hiring, mentoring, team growth, and engineering community development.

Manage post-sales relationships for industrial and critical-infrastructure customers, driving onboarding, adoption, satisfaction, retention, and expansion. Develop success plans, monitor account health and churn risk, demonstrate business value, maintain Salesforce records, and collaborate with Sales, Technical Account Management, Professional Services, Intelligence, and Support. The role requires cybersecurity familiarity, strong executive communication, remote independence, and up to 25% travel.

Serve as a technical bridge between Dragos and federal customers by understanding mission requirements, designing cybersecurity solutions, conducting demonstrations, supporting sales activities, managing proof-of-concept deployments, troubleshooting issues, and responding to proposals and technical inquiries. The role requires federal procurement knowledge, cybersecurity and ICS/OT expertise, active Top Secret clearance, and regular travel up to 50%.

Leads Dragos Public Sector’s post-sales technical team, mentoring subject matter experts and driving customer adoption, operationalization, and measurable platform value. The role manages customer escalations, stakeholder relationships, product feedback, roadmap advocacy, team processes, performance metrics, and AI-enabled improvements. It requires industrial cybersecurity expertise, SIEM experience, advanced network traffic analysis, U.S. citizenship, and willingness to travel up to 25%.

Conduct early-stage product demonstrations and technical discovery for prospective customers. Partner with business development, marketing, account teams, and senior solution architects to qualify opportunities, provide consultative OT security recommendations, answer product and services inquiries, and maintain demo content, datasets, and lab environments. Share customer insights with product, marketing, and engineering teams. Travel may be required up to 15%.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Owns the Dragos Platform’s release architecture, packaging, documentation, communications, and delivery across on-premises, cloud-hosted, customer-hosted, and hybrid environments. Manages cloud vendor relationships, coordinates release mechanisms and schedules, develops reference architectures, and partners with Engineering, Product Marketing, Support, Customer Success, and customers to prioritize deployment capabilities and ensure reliable releases.

Lead large-scale Linux sensor platform initiatives for high-performance OT and ICS network monitoring. Design and improve packet ingestion, capture pipelines, queue management, broker integration, observability, and reliability. Own production root cause analysis, postmortems, performance benchmarks, and durable fixes. Translate business goals into technical plans, establish engineering standards, mentor team members, and guide architecture across the sensor codebase.

Develop and validate high-fidelity threat detections and asset-identification analytics for industrial control system environments. Analyze threat intelligence, packet captures, host logs, network and device artifacts, and large datasets to identify adversary behaviors. Mentor detection engineers, review and triage detection requests, document analytics processes, and partner with engineering and quality teams to address platform gaps. Support ICS cyber-range activities and contribute to detection testing, tuning, and knowledge-base maintenance.

Designs and manages scalable data pipelines, contracts, transformation layers, and analytics models. The role focuses on data governance, observability, lineage, configuration validation, and collaboration with product engineering teams. It requires processing large datasets, integrating cloud and on-premises industrial technologies, and implementing streaming and message-queuing solutions, ideally in cybersecurity or industrial environments.

Design and maintain data pipelines, models, and transformation layers for analytics. Build data contracts, observability and lineage tooling, collaborate with product engineering, and optimize data structures for performance and scalability.

Lead and grow a data engineering team building and modernizing the core data platform for cybersecurity products. Define technical strategy and data models, ensure data quality for detection and analytics, champion AI-assisted engineering, oversee production support and incident response, collaborate with cross-functional teams, and drive hiring and best practices to deliver scalable, high-performance data pipelines and storage.

Design and implement scalable data integrations and transformation layers for cybersecurity products. Build data contracts, dimensional/incremental models, observability, and lineage tooling. Collaborate with product engineering to integrate SIEMs (Sentinel, Splunk) and deploy cloud/on-prem solutions on Kubernetes/Docker, processing medium-to-large datasets and stream/message systems.

Lead and grow the Backend Engineering team building microservice-based platform components for streaming data ingest, detection processing, baseline learning, asset reconciliation, and core platform APIs. Mentor engineers, collaborate with tech leads and product managers, provide technical design input, support production deployments, and occasionally contribute to development and troubleshooting.

Design, build, and deploy production-grade ML systems for ICS/xOT cybersecurity, including threat detection, anomaly detection, NLP/LLM applications, and scalable data pipelines with observability and MLOps practices for cloud and on-prem environments.

Lead design and modernization of scalable, secure data systems and real-time pipelines for xOT cybersecurity. Create data contracts, observability, lineage, and cross-functional solutions supporting cloud and on-prem deployments, Kubernetes, and stream processing to enable threat detection and intelligence.