Lead implementation of a Continuous Threat Exposure Management platform, migrating from legacy vulnerability tools. Design risk-scoring, SLA, exception, escalation, integration, reconciliation, reporting, and operating-model processes. Validate scanner data, build ServiceNow and API integrations, automate analysis with Python, create dashboards and KPIs, and document configurations, workflows, runbooks, and policies for technical and executive stakeholders.
Description
Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.
Dragonfli Group is seeking a Vulnerability Management / CTEM Specialist to join an embedded security team supporting a large commercial enterprise's transition to a modern Continuous Threat Exposure Management (CTEM) program. This role will lead the implementation of a new CTEM platform, replacing a legacy vulnerability management tool, and will design the surrounding operational processes — from exploitability-based risk scoring and SLA frameworks to exception handling and escalation procedures. The ideal candidate brings 5+ years of experience in vulnerability management or CTEM platform delivery, hands-on integration work with ITSM tools, and the ability to translate technical processes into clear documentation for both technical and executive audiences.
This is a contract position involving a large commercial enterprise in the Financial Services industry. Candidates with previous consulting or contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.
Responsibilities:
- Lead the implementation of a CTEM platform, migrating from a legacy vulnerability management tool
- Design and configure connectors, scoring/exploitability models, and consolidation logic across scanners and source systems
- Validate data ingestion fidelity across vulnerability scanners and source systems
- Design SLA and exploitability/risk-scoring frameworks
- Build exception and risk-acceptance workflows
- Perform asset/vulnerability de-duplication and inventory reconciliation
- Stand up critical/high-priority vulnerability escalation processes
- Build and validate API-based integrations between the CTEM platform and downstream systems (e.g., ServiceNow)
- Write Python scripts/automation for data tagging, gap analysis, and reporting
- Build role-based dashboards and reporting for analysts, remediation owners, and CISO-level stakeholders
- Develop KPI/metrics frameworks for security operations
- Author platform configuration documentation, runbooks, and policy/SLA documentation
- Support business process mapping and current-state/future-state workflow design
- Develop Target Operating Model (TOM) documentation
Must-Have:
- Experience with Risk-Based Vulnerability Management (RBVM) / CTEM tools and platforms (e.g., Kenna, Zafran, Rapid7, Tenable, Qualys)
- Experience with vulnerability management platforms: connectors, scoring/exploitability models, consolidation logic, ticketing integration
- Experience validating data ingestion fidelity across scanners and source systems
- Experience designing SLA and exploitability/risk-scoring frameworks
- Experience with exception and risk-acceptance process design
- Experience with asset/vulnerability de-duplication and asset inventory reconciliation
- Experience standing up critical/high-priority vulnerability escalation processes
- 5+ years of relevant vulnerability management / cybersecurity consulting experience
- U.S. Citizenship or Permanent Residency; ability to work within the continental U.S.
Preferred / Nice-to-Have:
- API-based system integration and validation testing experience
- Scripting/automation experience (e.g., Python) for data tagging, gap analysis, reporting automation
- Experience with IT Service Management (ITSM) platforms (e.g., ServiceNow) — workflow design and ticket lifecycle automation
- Experience building role-based dashboards/reporting for technical and executive audiences
- Experience developing KPI/metrics frameworks for security operations
- Technical writing experience (platform configuration documentation, runbooks, policy/SLA documentation)
- Business process mapping and current-state/future-state workflow design
- Experience developing Target Operating Model (TOM) documentation
Technical Skills:
- RBVM/CTEM platforms (Zafran, Kenna, Rapid7, Tenable, Qualys)
- Vulnerability scanner integration and API-based connectors
- Exploitability/risk-scoring models
- ITSM platforms (ServiceNow)
- Python scripting/automation
- Dashboarding and reporting tools
Soft Skills:
- Cross-functional stakeholder communication (analysts through executives)
- Technical writing and documentation
- Process design and facilitation
- Ability to work independently within an embedded client team
- Medical — Multiple POS health plan options including an HSA-compatible plan
- Dental — PPO coverage for preventive, basic, and major services
- Vision — Annual exam, frames, lenses, and contact lens allowance
- 401(k) — Employer match up to 5% of eligible compensation
- Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings
- Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each
- PTO — 15–25 days annually based on tenure
- Paid Federal Holidays — All 11 federal holidays observed
Dragonfly AI London, England Office
8-14 Vine Hill, London, United Kingdom, EC1R 5DX
Similar Jobs
Financial Services
Design and deliver enterprise-grade machine learning systems and AI-powered applications for banking. Build scalable, secure, distributed applications and automated cloud, desktop, and ML pipelines. Apply MLOps practices for versioning, reproducibility, and observability while collaborating with cloud and site reliability engineering teams. Develop reusable libraries and business-critical, data-intensive solutions, aligning machine learning problems with business objectives. The role may include mentoring or people leadership.
Top Skills:
AWSCloud ComputingDatabasesDistributed SystemsKubernetesLanggraphMachine LearningMessaging And Queue SystemsMlopsMulti-ThreadingPydantic AiPythonTypescript
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Leads sales operations and commercial strategy teams supporting complex enterprise deals. Oversees deal support, pricing strategy, modeling, proposals, solution positioning, and sales enablement. Partners with Sales, Product, and Solution Consulting leaders on strategic opportunities, coaches team members, establishes scalable processes, and improves commercial execution, reporting, and seller productivity. Requires hands-on involvement in high-priority customer opportunities and the ability to influence executive stakeholders.
Top Skills:
Enterprise SoftwareSaaS
Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Lead go-to-market execution for Connected Equipment as an overlay specialist, partnering with Account Executives to generate pipeline, architect high-value enterprise deals, drive pilots/trials, inform product roadmap, build scalable sales frameworks, and travel to customer sites to advance solutions and close complex transactions.
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
