Jobs at Dragonfly AI

Configure and mature CrowdStrike Falcon Cloud Security and CNAPP capabilities across Kubernetes and Amazon EKS environments. Responsibilities include CSPM, CDR, CWP, CIEM, container security, runtime protection, admission control, security testing, and detection validation. The consultant will collaborate with cloud engineering teams, communicate technical decisions to stakeholders, and support a state government health agency in a primarily remote role with monthly travel.

Leads an AI security operating capability for Microsoft Copilot and Power Platform environments. Assesses security gaps, designs and configures controls, performs testing, documents runbooks, validates AI use cases, manages client relationships, leads knowledge transfer, mentors supporting consultants, and reports workstream risks and status. The role requires hands-on expertise with Copilot Studio, Power Automate, Dataverse, Entra, and Purview in a fully remote federal consulting engagement.

Configure, test, document, and validate cybersecurity controls for AI use cases running on Microsoft Copilot Studio and Power Platform. The consultant will assess security tooling, identify control gaps, maintain evidence and runbooks, support architecture documentation, and collaborate with federal client security and platform teams. The role requires hands-on experience with Copilot Studio, Power Automate, Dataverse, Entra ID, and Purview, plus strong communication and technical documentation skills.

Supports cybersecurity engineering for a federal cloud modernization program. Responsibilities include implementing and monitoring security controls, cloud systems integration, automation, AI-assisted tooling, configuration hardening, vulnerability management, evidence collection, control testing, STIG and baseline artifact maintenance, and technical documentation. The role is fully remote and requires collaboration with senior engineers, system owners, developers, and assessors.

Support federal cybersecurity governance, risk, and compliance activities across the NIST RMF lifecycle. Conduct security control assessments, risk analyses, POA&M reviews, authorization support, and mitigation tracking. Maintain cyber risk registers, dashboards, and FISMA reporting while supporting IRM, SCRM, and TPRM programs. Present technical findings and recommendations to technical and non-technical stakeholders, using Power BI and automation tools to improve compliance reporting and risk visibility.

Plan and independently execute authorized penetration tests across network, endpoint, wireless, database, application, and infrastructure environments. Develop Rules of Engagement, execution plans, status updates, and formal reports; coordinate scope and safety procedures with system owners and SOC teams; validate vulnerabilities and exploit chains; support CISA WAS, FAST, and KEV retesting; apply ATT&CK/ATLAS mapping and AI-enabled tools with human oversight; and mentor junior testers.

Supports authorized penetration testing for a federal agency through assessment planning, reconnaissance, enumeration, evidence collection, findings documentation, remediation recommendations, retesting, and reporting. The role also assists with triaging external-facing asset findings, CISA WAS/FAST results, KEV exposures, and VDP submissions. Responsibilities include maintaining schedules and scope records, coordinating stakeholders, tracking actions, and using automation and AI-enabled tools to improve testing and reporting workflows.

Design, implement, monitor, and improve cybersecurity controls and tooling for a federal agency modernization program. The role focuses on cloud security engineering, systems integration, automation, AI-enabled capabilities, Zero Trust architecture, continuous monitoring, and secure cloud service integration. Responsibilities include solving complex network and systems problems, evaluating technologies, developing standards, supporting security assessments, and maintaining resilient cybersecurity environments.