Senior Software Engineer

Dragos, Inc. is a global leader in xOT cybersecurity, dedicated to protecting critical infrastructure systems. They are seeking a highly skilled Senior Software Engineer to join their Vulnerability Analysis content team, responsible for designing and maintaining CI/CD pipelines to accelerate the delivery of vulnerability findings to customers.

Responsibilities:

• Design, build, and maintain CI/CD pipelines for content review, validation, and deployment, including vulnerability analysis, asset catalogs, and report generation
• Develop and improve analyst workflows and tooling to streamline the vulnerability analysis and publication process
• Partner with vulnerability analysts to understand pain points and automate repetitive tasks in the content creation lifecycle
• Implement automated testing frameworks, including unit, integration, and end-to-end tests for vulnerability content validation
• Implement and maintain data validation, schema enforcement, and content quality assurance automation to ensure accuracy and consistency of vulnerability findings
• Collaborate with other engineering teams to integrate vulnerability content delivery into broader Dragos systems
• Mentor junior engineers and guide best practices
• Continuously improve deployment velocity and content quality

Requirements:

• 5+ years in a production software development environment, with 2+ years of experience with Python development
• 1+ years of experience designing and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, GitHub Actions, or similar
• Experience with containerization technologies (Docker, Kubernetes) and infrastructure-as-code (Terraform, Ansible, or similar)
• Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native services
• Demonstrated ability to design and build developer tooling and workflow automation that improves team productivity
• Proficiency with git workflows, branching strategies, and code review processes at scale
• Solid understanding of Linux systems administration and command-line tooling
• Strong communication skills with the ability to translate technical concepts for non-technical stakeholders
• Experience working in a security-focused environment or with security content delivery pipelines is a plus
• ICS/OT knowledge and experience is nice to have
• Rust knowledge and experience is nice to have
• Experience with observability tools (Prometheus, Grafana, ELK stack, or similar) is helpful
• Background in vulnerability management, threat intelligence, or security operations is a bonus