Jobs at Dragos

Designs and manages scalable data pipelines, contracts, transformation layers, and analytics models. The role focuses on data governance, observability, lineage, configuration validation, and collaboration with product engineering teams. It requires processing large datasets, integrating cloud and on-premises industrial technologies, and implementing streaming and message-queuing solutions, ideally in cybersecurity or industrial environments.

Design and maintain data pipelines, models, and transformation layers for analytics. Build data contracts, observability and lineage tooling, collaborate with product engineering, and optimize data structures for performance and scalability.

Lead execution and continuous improvement of a global partner program across distributors, VARs, OEMs, GSIs, and hyperscaler marketplaces. Translate strategy into scalable processes, enablement, onboarding, contract workflow, partner support SLAs, and cross-functional coordination. Manage partner relationships, escalations, business reviews, and represent the company at partner events.

Lead ICS/OT adversary hunting for assigned threat groups; author intelligence products; conduct proactive and reactive hunts using telemetry and file-analysis tools; use Synapse and Storm Query Language to model and automate investigations; support incident response surge events; mentor peers; collaborate cross-functionally and represent Dragos externally.

The Technical Enablement Manager develops and delivers technical training, courseware, demos, labs, assessments, and enablement programs for internal and external technical sales teams. The role identifies learning gaps, improves pre-sales and proof-of-concept processes, maintains content repositories and learning platforms, measures training effectiveness, and collaborates with Sales Enablement, Solutions Architecture, Product Management, Customer Experience, and Channel Partner leaders globally.

Oversee indirect tax compliance across multiple jurisdictions, including Sales & Use, VAT, GST, and gross receipts filings. Reconcile tax liability accounts, prepare journal entries, support audits, manage exemption certificates, and maintain Avalara tax software integrated with the ERP system. Research tax issues related to business expansion and product launches, manage service providers, improve processes, and collaborate with finance and cross-functional teams to meet compliance deadlines.

Own complex, cross-functional business operations projects spanning logistics, infrastructure readiness, procurement, vendor management, software migrations, and strategic initiatives. Develop project plans, roadmaps, forecasts, budgets, risk registers, and executive reporting. Lead Agile ceremonies, issue resolution, change control, governance, and stakeholder alignment across technical and business teams. Mentor junior project managers and support operational growth and M&A integration activities.

Plans, deploys, configures, and supports the Dragos Platform in customer industrial environments. Designs network architecture and sensor placement, leads onsite and remote implementations, troubleshoots integrations, manages upgrades and patches, supports ICS/OT security operations, collaborates on investigations, and produces technical documentation. The role requires strong networking, Linux, scripting, SIEM, cloud, and industrial cybersecurity expertise, an active Secret clearance, and up to 30% travel.

Lead and grow a data engineering team building and modernizing the core data platform for cybersecurity products. Define technical strategy and data models, ensure data quality for detection and analytics, champion AI-assisted engineering, oversee production support and incident response, collaborate with cross-functional teams, and drive hiring and best practices to deliver scalable, high-performance data pipelines and storage.

Design and implement scalable data integrations and transformation layers for cybersecurity products. Build data contracts, dimensional/incremental models, observability, and lineage tooling. Collaborate with product engineering to integrate SIEMs (Sentinel, Splunk) and deploy cloud/on-prem solutions on Kubernetes/Docker, processing medium-to-large datasets and stream/message systems.

Lead and grow the Backend Engineering team building microservice-based platform components for streaming data ingest, detection processing, baseline learning, asset reconciliation, and core platform APIs. Mentor engineers, collaborate with tech leads and product managers, provide technical design input, support production deployments, and occasionally contribute to development and troubleshooting.

Lead and manage an adversary hunting team focused on OT threat groups. Perform hands-on hunting using Synapse and Storm Query Language, produce WorldView reports and detection artifacts, collaborate with intelligence and malware analysis, refine KPIs, support incident response surges, recruit and develop staff, and represent the team externally.

Design, build, and deploy production-grade ML systems for ICS/xOT cybersecurity, including threat detection, anomaly detection, NLP/LLM applications, and scalable data pipelines with observability and MLOps practices for cloud and on-prem environments.

Hunt, identify, and analyze adversary tools, malware, and tradecraft targeting ICS/OT. Develop and maintain analysis tools and scripts, contribute to threat assessments and customer advisories, leverage intel and network analysis tools, recommend automation and telemetry improvements, and support incident response and external communications.

Lead design and modernization of scalable, secure data systems and real-time pipelines for xOT cybersecurity. Create data contracts, observability, lineage, and cross-functional solutions supporting cloud and on-prem deployments, Kubernetes, and stream processing to enable threat detection and intelligence.

Design and maintain data pipelines, data contracts, and transformation layers for analytics. Model complex sources, enable observability and lineage, collaborate with product teams, and optimize data structures for scalable cybersecurity and industrial datasets.

Design, build, and deploy production ML systems for ICS/xOT cybersecurity, including threat detection, anomaly detection, NLP/LLM features, data pipelines, observability, MLOps, and containerized deployments across cloud and on-prem environments.

Design, build, and maintain scalable AWS and Azure infrastructure using Infrastructure-as-Code. Develop automation, deployment pipelines, and production release processes. Contribute code to cloud services, manage networking and IAM, ensure availability and security, and respond to incidents while collaborating on observability and security practices.

Lead the Cloud Platform product team to replace and unify Dragos's customer portals into a single platform. Define platform and API architecture, integrate threat intelligence, managed services, AI, and compliance features, manage artifact delivery and entitlement, drive adoption and migrations, partner with engineering and stakeholders, engage customers for validation, track KPIs, and support go-to-market efforts.

Lead product strategy and roadmap for Neighborhood Keeper, a collective-defense platform for anonymized xOT threat intelligence. Define privacy/anonymization architecture, federated query and data-sharing features, Knowledge Pack pipeline, and Trusted Advisor integrations. Engage customers, government partners, and engineering to prioritize, deliver, measure KPIs, and drive adoption and go-to-market efforts. Support sales and community growth while balancing trade-offs and regulatory constraints.