Jobs at Dragonfly AI

Lead implementation of a Continuous Threat Exposure Management platform, migrating from legacy vulnerability tools. Design risk-scoring, SLA, exception, escalation, integration, reconciliation, reporting, and operating-model processes. Validate scanner data, build ServiceNow and API integrations, automate analysis with Python, create dashboards and KPIs, and document configurations, workflows, runbooks, and policies for technical and executive stakeholders.

Own the security posture of assigned federal systems, maintaining System Security Plans and authorization artifacts. Lead RMF execution, control assessments, audits, continuous monitoring, vulnerability remediation, POA&M management, and risk acceptance decisions. Advise system and business owners, report security metrics, support ongoing authorization, and coordinate assessment readiness. The role requires strong NIST knowledge, documentation skills, stakeholder communication, and experience with federal cybersecurity compliance.

Supports federal cybersecurity authorization activities by developing and maintaining System Security Plans, authorization packages, POA&M records, and continuous monitoring artifacts. Provides security guidance to developers, project managers, and system owners; supports NIST Risk Management Framework tasks, control implementation, evidence mapping, access reviews, and ATO lifecycle activities. The role also contributes to automation and AI tooling for compliance documentation and escalates complex issues to senior ISSO personnel.

Design, implement, monitor, and improve cybersecurity controls and tooling for a federal agency modernization program. The role focuses on cloud security engineering, systems integration, automation, AI-enabled capabilities, Zero Trust architecture, continuous monitoring, and secure cloud service integration. Responsibilities include solving complex network and systems problems, evaluating technologies, developing standards, supporting security assessments, and maintaining resilient cybersecurity environments.

Supports federal cybersecurity governance and compliance activities under the NIST Risk Management Framework. Responsibilities include system categorization, security control selection and assessment, authorization support, risk trade-off analysis, mitigation strategy development, POA&M and risk-register tracking, regulatory monitoring, evidence collection, dashboards, and compliance reporting. The analyst also supports client presentations and advises stakeholders on cybersecurity designs and solutions.

Support, troubleshoot, configure, and develop SailPoint IdentityIQ environments, including reporting, joiner/mover/leaver processes, certification campaigns, access reviews, and ServiceNow Service Catalog integration. Partner with client stakeholders, continue previously paused connector development, and document technical changes and troubleshooting. The role requires at least three years of SailPoint IIQ experience, identity governance expertise, and U.S.-based work authorization.