Teams at Dragonfly AI

Lead implementation of a Continuous Threat Exposure Management platform, migrating from legacy vulnerability tools. Design risk-scoring, SLA, exception, escalation, integration, reconciliation, reporting, and operating-model processes. Validate scanner data, build ServiceNow and API integrations, automate analysis with Python, create dashboards and KPIs, and document configurations, workflows, runbooks, and policies for technical and executive stakeholders.

Own the security posture of assigned federal systems, maintaining System Security Plans and authorization artifacts. Lead RMF execution, control assessments, audits, continuous monitoring, vulnerability remediation, POA&M management, and risk acceptance decisions. Advise system and business owners, report security metrics, support ongoing authorization, and coordinate assessment readiness. The role requires strong NIST knowledge, documentation skills, stakeholder communication, and experience with federal cybersecurity compliance.

Supports federal cybersecurity authorization activities by developing and maintaining System Security Plans, authorization packages, POA&M records, and continuous monitoring artifacts. Provides security guidance to developers, project managers, and system owners; supports NIST Risk Management Framework tasks, control implementation, evidence mapping, access reviews, and ATO lifecycle activities. The role also contributes to automation and AI tooling for compliance documentation and escalates complex issues to senior ISSO personnel.