Pros
I moved to Dragos from a comfortable position elsewhere in pursuit of Dragos - I wanted to be part of this team and go deeper into ICS cybersecurity. Wish granted, I have been on Dragos' services team for several years now, and I'm quite happy I made the move. Amazing collection of people: The team is motivated and genuinely cares about protecting industrial infrastructure. I really appreciate that everyone comes from different backgrounds—e.g., former plant engineers, control system vendors, IT security professionals, and various government roles—and it's easy to reach out and tap into this expertise to learn or get a different perspective. It holds true for me that this is a very mission-driven team/company, and I appreciate keeping this as a core value, and that comes from the people. Work from home: Many roles can work remotely from home. This offers a lot of flexibility in how you allocate your day, but that also means it's up to you to create boundaries for work/life balance. There's a strong 'video-on' culture (e.g., for Zoom meetings) promoted by leadership to help combat the lack of direct interactions. However, still, you should expect most of your interactions to be via video conference. Autonomy: Overall objectives are communicated, and individuals are expected to contribute, but not micro-managed. This requires you to be proactive in most cases. While teammates are just a Slack away for getting help, don't expect management to give low-level instructions on daily tasks. Exposure to diverse infrastructure: We (services) interact with many different industries, so you get a chance to talk to oil refineries, rail systems, food manufacturing, power, and more. I get to see those who are trying to figure out computer security, and also those at the tip of the security spear. We'll travel to site in some cases, and I personally dig getting to tour the sites and marvel at what societies have engineered to run our world. Engagements are short (often a few weeks), meaning that you're frequently exposed to new things. Opportunities: Between the various intel, threat detections, penetration testers, OT Watch, and incident response teams, there are a lot of cool fields within Dragos. In line with the 'autonomy' comment above, there's not a prescribed path for how to move internally, so you're going to have to chase this yourself if you want to make a jump, but I've seen my team members show an interest and then move into other parts of the organization when spots open. In my past experience, these other teams either didn't exist or were far less accessible.
Cons
As the company grows, we have changes to navigate - reporting structure, culture, and general logistics of organizational growth. While ultimately we aim for improvement, that doesn't make it easy.
