Lead implementation of a Continuous Threat Exposure Management platform, migrating from legacy vulnerability tools. Design risk-scoring, SLA, exception, escalation, integration, reconciliation, reporting, and operating-model processes. Validate scanner data, build ServiceNow and API integrations, automate analysis with Python, create dashboards and KPIs, and document configurations, workflows, runbooks, and policies for technical and executive stakeholders.
Description
Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.
Dragonfli Group is seeking a Vulnerability Management / CTEM Specialist to join an embedded security team supporting a large commercial enterprise's transition to a modern Continuous Threat Exposure Management (CTEM) program. This role will lead the implementation of a new CTEM platform, replacing a legacy vulnerability management tool, and will design the surrounding operational processes — from exploitability-based risk scoring and SLA frameworks to exception handling and escalation procedures. The ideal candidate brings 5+ years of experience in vulnerability management or CTEM platform delivery, hands-on integration work with ITSM tools, and the ability to translate technical processes into clear documentation for both technical and executive audiences.
This is a contract position involving a large commercial enterprise in the Financial Services industry. Candidates with previous consulting or contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.
Responsibilities:
- Lead the implementation of a CTEM platform, migrating from a legacy vulnerability management tool
- Design and configure connectors, scoring/exploitability models, and consolidation logic across scanners and source systems
- Validate data ingestion fidelity across vulnerability scanners and source systems
- Design SLA and exploitability/risk-scoring frameworks
- Build exception and risk-acceptance workflows
- Perform asset/vulnerability de-duplication and inventory reconciliation
- Stand up critical/high-priority vulnerability escalation processes
- Build and validate API-based integrations between the CTEM platform and downstream systems (e.g., ServiceNow)
- Write Python scripts/automation for data tagging, gap analysis, and reporting
- Build role-based dashboards and reporting for analysts, remediation owners, and CISO-level stakeholders
- Develop KPI/metrics frameworks for security operations
- Author platform configuration documentation, runbooks, and policy/SLA documentation
- Support business process mapping and current-state/future-state workflow design
- Develop Target Operating Model (TOM) documentation
Must-Have:
- Experience with Risk-Based Vulnerability Management (RBVM) / CTEM tools and platforms (e.g., Kenna, Zafran, Rapid7, Tenable, Qualys)
- Experience with vulnerability management platforms: connectors, scoring/exploitability models, consolidation logic, ticketing integration
- Experience validating data ingestion fidelity across scanners and source systems
- Experience designing SLA and exploitability/risk-scoring frameworks
- Experience with exception and risk-acceptance process design
- Experience with asset/vulnerability de-duplication and asset inventory reconciliation
- Experience standing up critical/high-priority vulnerability escalation processes
- 5+ years of relevant vulnerability management / cybersecurity consulting experience
- U.S. Citizenship or Permanent Residency; ability to work within the continental U.S.
Preferred / Nice-to-Have:
- API-based system integration and validation testing experience
- Scripting/automation experience (e.g., Python) for data tagging, gap analysis, reporting automation
- Experience with IT Service Management (ITSM) platforms (e.g., ServiceNow) — workflow design and ticket lifecycle automation
- Experience building role-based dashboards/reporting for technical and executive audiences
- Experience developing KPI/metrics frameworks for security operations
- Technical writing experience (platform configuration documentation, runbooks, policy/SLA documentation)
- Business process mapping and current-state/future-state workflow design
- Experience developing Target Operating Model (TOM) documentation
Technical Skills:
- RBVM/CTEM platforms (Zafran, Kenna, Rapid7, Tenable, Qualys)
- Vulnerability scanner integration and API-based connectors
- Exploitability/risk-scoring models
- ITSM platforms (ServiceNow)
- Python scripting/automation
- Dashboarding and reporting tools
Soft Skills:
- Cross-functional stakeholder communication (analysts through executives)
- Technical writing and documentation
- Process design and facilitation
- Ability to work independently within an embedded client team
- Medical — Multiple POS health plan options including an HSA-compatible plan
- Dental — PPO coverage for preventive, basic, and major services
- Vision — Annual exam, frames, lenses, and contact lens allowance
- 401(k) — Employer match up to 5% of eligible compensation
- Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings
- Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each
- PTO — 15–25 days annually based on tenure
- Paid Federal Holidays — All 11 federal holidays observed
Similar Jobs
Artificial Intelligence • Fintech • Information Technology • Logistics • Payments • Business Intelligence • Generative AI
Leads a regional pre-sales Solution Advisory team to drive revenue growth, pipeline development, and customer success. Responsibilities include assigning resources, aligning with sales leadership, coaching and developing talent, supporting recruiting and retention, demonstrating Coupa’s platform architecture and integrations, advising prospects on business needs, and scaling best practices across the organization.
Top Skills:
CoupaCoupa AiCoupa Bsm
Cloud • Software
Build and operate AI-powered developer tools, agentic workflows, reusable skills, integrations, orchestration capabilities, backend services, and APIs. Integrate AI systems with source control, CI/CD, issue tracking, documentation, and developer environments. Apply testing, evaluation, monitoring, security, and feedback practices to non-deterministic AI systems while collaborating with developers and contributing to platform architecture and engineering processes.
Top Skills:
Agentic AiAi Coding ToolsAPIsCi/CdContainersDistributed SystemsDocument DatabasesEmbeddingsGitGoJavaKotlinKubernetesLarge Language ModelsPythonRelational DatabasesRetrieval-Augmented GenerationTypescriptVector Databases
Cloud • Information Technology • Productivity • Security • Software • App development • Automation
Drive adoption of Atlassian's AI platform Rovo by discovering high-value use cases, co-building custom agents, configuring connectors, and deploying solutions to production. Run discovery workshops, design and validate integrations, enable customers for independent scale, collaborate with account and product teams, and surface product feedback. Travel up to 15% for customer meetings and events.
Top Skills:
Ai AgentsAi PlatformsAtlassian (JiraConfluence)Enterprise SearchGitGoogle DrivePrompt EngineeringRovoRovo StudioSharepointSlackThird-Party Connectors
What you need to know about the Belfast Tech Scene
If asked to name the birthplace of the RMS Titanic, you might not say Belfast. Similarly, if asked to name Europe's leading destination for foreign direct investment in new software development, Belfast might not come to mind. Yet, both are true. The city has emerged as a tech powerhouse, recently ranked among the best in the U.K. for tech careers — especially for software developers. It also leads the U.K. with the highest percentage of software development jobs advertised.
