Jobs at Dragonfly AI

Support emergency management and incident response for a large energy enterprise: develop/update EOPs and IRPs, design escalation procedures, coordinate mutual aid, plan and facilitate HSEEP-aligned exercises, apply ICS/NIMS principles, and produce after-action reviews to improve operational readiness.

Develop, edit, format, and maintain business continuity, emergency operations, incident response, and cybersecurity documentation. Produce After-Action Reports, exercise products, job aids, policies, and executive briefings. Maintain version control and formatting standards, collaborate with SMEs and project teams, and support operational readiness and regulatory compliance for a commercial energy-sector engagement.

Partner with business units to conduct BIAs, develop and maintain Business Continuity and Recovery Plans, assess continuity programs against standards, design and run HSEEP-aligned exercises, draft AARs and improvement plans, and coordinate continuity alignment with emergency management and cyber/physical security teams for an energy-sector client.

Lead overnight SOC operations: conduct advanced investigations, incident response, and threat hunting; perform QC on Tier 1/2 work; mentor analysts; own escalations and client contact; improve runbooks and detection tuning; support monthly reporting and trend analysis.

Overnight Tier 2 SOC Analyst responsible for deep investigation, containment, and escalation of SIEM and EDR alerts, developing runbooks/SOPs, tracking vulnerabilities (Tenable), meeting SLA response/resolution targets, maintaining auditable tickets and shift logs, and communicating with clients and on-call leads.

Overnight SOC analyst monitors SIEM (Sentinel/Splunk) and EDR alerts, triages incidents per runbooks, validates vulnerabilities (Tenable), maintains auditable tickets and shift logs, escalates incidents, communicates with clients and on-call leads, and supports reporting and SOP improvements.