Jobs at Dragonfly AI

Supports cybersecurity engineering for a federal cloud modernization program. Responsibilities include implementing and monitoring security controls, cloud systems integration, automation, AI-assisted tooling, configuration hardening, vulnerability management, evidence collection, control testing, STIG and baseline artifact maintenance, and technical documentation. The role is fully remote and requires collaboration with senior engineers, system owners, developers, and assessors.

Support federal cybersecurity governance, risk, and compliance activities across the NIST RMF lifecycle. Conduct security control assessments, risk analyses, POA&M reviews, authorization support, and mitigation tracking. Maintain cyber risk registers, dashboards, and FISMA reporting while supporting IRM, SCRM, and TPRM programs. Present technical findings and recommendations to technical and non-technical stakeholders, using Power BI and automation tools to improve compliance reporting and risk visibility.

Administer and monitor PKI and Certificate Authority services, including ADCS, certificate lifecycle management, Venafi or CyberArk automation, and HSM operations. Troubleshoot complex certificate issues, advise stakeholders, develop documentation and training, and identify automation and AI opportunities. Supervise the PKI team, define requirements for critical applications, and provide strategic and technical guidance to federal agency program staff.

Plan and independently execute authorized penetration tests across network, endpoint, wireless, database, application, and infrastructure environments. Develop Rules of Engagement, execution plans, status updates, and formal reports; coordinate scope and safety procedures with system owners and SOC teams; validate vulnerabilities and exploit chains; support CISA WAS, FAST, and KEV retesting; apply ATT&CK/ATLAS mapping and AI-enabled tools with human oversight; and mentor junior testers.

Supports authorized penetration testing for a federal agency through assessment planning, reconnaissance, enumeration, evidence collection, findings documentation, remediation recommendations, retesting, and reporting. The role also assists with triaging external-facing asset findings, CISA WAS/FAST results, KEV exposures, and VDP submissions. Responsibilities include maintaining schedules and scope records, coordinating stakeholders, tracking actions, and using automation and AI-enabled tools to improve testing and reporting workflows.

Lead implementation of a Continuous Threat Exposure Management platform, migrating from legacy vulnerability tools. Design risk-scoring, SLA, exception, escalation, integration, reconciliation, reporting, and operating-model processes. Validate scanner data, build ServiceNow and API integrations, automate analysis with Python, create dashboards and KPIs, and document configurations, workflows, runbooks, and policies for technical and executive stakeholders.

Own the security posture of assigned federal systems, maintaining System Security Plans and authorization artifacts. Lead RMF execution, control assessments, audits, continuous monitoring, vulnerability remediation, POA&M management, and risk acceptance decisions. Advise system and business owners, report security metrics, support ongoing authorization, and coordinate assessment readiness. The role requires strong NIST knowledge, documentation skills, stakeholder communication, and experience with federal cybersecurity compliance.

Supports federal cybersecurity authorization activities by developing and maintaining System Security Plans, authorization packages, POA&M records, and continuous monitoring artifacts. Provides security guidance to developers, project managers, and system owners; supports NIST Risk Management Framework tasks, control implementation, evidence mapping, access reviews, and ATO lifecycle activities. The role also contributes to automation and AI tooling for compliance documentation and escalates complex issues to senior ISSO personnel.

Design, implement, monitor, and improve cybersecurity controls and tooling for a federal agency modernization program. The role focuses on cloud security engineering, systems integration, automation, AI-enabled capabilities, Zero Trust architecture, continuous monitoring, and secure cloud service integration. Responsibilities include solving complex network and systems problems, evaluating technologies, developing standards, supporting security assessments, and maintaining resilient cybersecurity environments.

Supports federal cybersecurity governance and compliance activities under the NIST Risk Management Framework. Responsibilities include system categorization, security control selection and assessment, authorization support, risk trade-off analysis, mitigation strategy development, POA&M and risk-register tracking, regulatory monitoring, evidence collection, dashboards, and compliance reporting. The analyst also supports client presentations and advises stakeholders on cybersecurity designs and solutions.

Support, troubleshoot, configure, and develop SailPoint IdentityIQ environments, including reporting, joiner/mover/leaver processes, certification campaigns, access reviews, and ServiceNow Service Catalog integration. Partner with client stakeholders, continue previously paused connector development, and document technical changes and troubleshooting. The role requires at least three years of SailPoint IIQ experience, identity governance expertise, and U.S.-based work authorization.