Dragonfli Group

Security Engineer

• Support RMF lifecycle activities for assigned federal information systems, including categorization, control implementation, assessment, and continuous monitoring, under the guidance of senior team members
• Assist in developing and updating system security documentation, including SSPs, Security Assessment Reports (SARs), and POA&Ms
• Help track and document security control deviations and vulnerabilities through to closure
• Support continuous monitoring activities, including log review and vulnerability scan analysis, alongside senior ISSOs
• Assist in maintaining system inventory, hardware/software baselines, and interconnection agreements
• Support incident response documentation, escalation tracking, and remediation follow-up
• Participate in security reviews, audits, and inspections as part of the broader team
• Coordinate with Information System Owners (ISOs) and other stakeholders on routine compliance tasks
• Build working knowledge of federal directives including FISMA and OMB A-130 through applied, on-the-job training

Junior Information System Security Officer

Engineer

• Lead and manage end-to-end vulnerability disclosure programs (VDP), including coordination with ethical hackers, system owners, and agency stakeholders.
• Own attack surface management programs (e.g., CISA FAST), including scheduling, scope management, findings coordination, and POA&M documentation.
• Manage and update Standard Operating Procedures (SOPs), SharePoint repositories, and program tracking documentation.
• Lead recurring stakeholder syncs (weekly vulnerability management meetings, DMZ syncs, Security Report presentations).
• Operate and maintain enterprise vulnerability scanning platforms including Tenable.sc, Tenable.io, and web application scanning tools (OpenText ScanCentral or equivalent).
• Scope, schedule, execute, and report on vulnerability scans across large, complex federal environments.
• Analyze scan results to identify critical and high-severity findings; triage false positives; prioritize remediation activities.
• Manage hardware/software certification pipelines; process ServiceNow tickets within defined SLAs.
• Support transition from legacy tools to modernized scanning platforms with minimal operational disruption.
• Track and drive remediation of critical, high, and all severity-tiered vulnerabilities to closure within program SLAs.
• Maintain accurate POA&M records for all open findings across program scope.
• Produce and present vulnerability dashboards, compliance reports, and executive-level status briefings.
• Validate remediation effectiveness through post-remediation scanning and analysis.
• Monitor HTTPS/HSTS compliance and other BOD requirements (BOD 18-01, BOD 20-01, and others as applicable).
• Build and maintain working relationships with CISA contacts, agency system owners, SOC personnel, and contractor teams.
• Communicate vulnerability risks and remediation recommendations clearly to both technical and non-technical audiences.
• Serve as subject matter expert and primary point of contact for assigned programs.
• Provide backfill coverage across vulnerability management workstreams as needed.

Vulnerability Management Engineer

Technical Writer

• Translate complex cybersecurity concepts, processes, and technical findings into plain-language written content for a range of audiences, including non-technical stakeholders
• Develop and maintain technical documentation including policies, procedures, user guides, standard operating procedures (SOPs), and program reports
• Apply knowledge of NIST, NIST Cybersecurity Framework (CSF), and CIS Controls to inform and structure documentation deliverables
• Collaborate with subject matter experts (SMEs), engineers, and program managers to gather technical information and validate accuracy
• Support cybersecurity program communications, including presentations, briefings, and executive summaries
• Review and edit existing documentation for clarity, consistency, accuracy, and compliance with agency style standards
• Assist in documenting AI tools and their appropriate use within the program context
• Maintain version control and documentation repositories in accordance with program standards
• Participate in team meetings and contribute to sprint planning or project milestone reviews as applicable

Business Analyst

• Lead and manage end-to-end vulnerability disclosure programs (VDP), including coordination with ethical hackers, system owners, and agency stakeholders.
• Own attack surface management programs (e.g., CISA FAST), including scheduling, scope management, findings coordination, and POA&M documentation.
• Manage and update Standard Operating Procedures (SOPs), SharePoint repositories, and program tracking documentation.
• Operate and maintain enterprise vulnerability scanning platforms including Tenable.sc, Tenable.io, and web application scanning tools.
• Scope, schedule, execute, and report on vulnerability scans across large, complex federal environments.
• Track and drive remediation of critical, high, and all severity-tiered vulnerabilities to closure within program SLAs.
• Build and maintain working relationships with CISA contacts, agency system owners, SOC personnel, and contractor teams.

Vulnerability Management Analyst

• Own end-to-end strategy, implementation, and operational health of CrowdStrike Falcon Identity Protection and the CSPM capabilities within CrowdStrike Cloud Security
• Proactively identify identity-based threats, misconfigurations, and cloud security gaps; drive remediation to closure in accordance with client policies and procedures
• Configure, tune, and maintain identity protection policies, IOM and IOA policies, and risk-based authentication controls
• Serve as the escalation point and trusted technical advisor to client leadership on identity and cloud security matters
• Develop runbooks, detection logic, and automation to reduce manual effort and improve response times
• Monitor the threat landscape and translate emerging risks into actionable hardening recommendations
• Coordinate and lead governance calls with stakeholders; produce agenda, notes, and follow-up actions independently
• Partner with other cybersecurity teams to integrate CrowdStrike telemetry into broader security operations
• Produce metrics, dashboards, and executive-level reporting on identity and cloud security posture
• Apply deep knowledge of identity-based attack techniques — including lateral movement, credential theft, Kerberoasting, and pass-the-hash — to inform detection and response strategy

Identity Security Engineer – ITDR, CSPM

Consultant

• Review and update existing NERC CIP policies and procedures to reflect virtualization requirements under NERC Project 2016-02
• Develop new documentation for in-scope BES Cyber Systems across all project phases including design, build, and delivery
• Document technical and procedural requirements for virtualized environments supporting critical infrastructure
• Develop testing and evidence collection strategies to support CIP compliance audits
• Update Management Model documentation to reflect changes in processes and procedures
• Conduct awareness and education sessions to drive organizational understanding of CIP virtualization changes
• Leverage assessment tools such as Tripwire or AssurX to support gap analysis and ongoing compliance monitoring
• Collaborate with internal stakeholders across IT, OT, and compliance functions to socialize policy changes
• Serve as a subject matter expert on NERC CIP standards, providing technical and regulatory guidance to project teams
• Support engagement planning, analysis, and stakeholder coordination throughout all project phases

Junior Information System Security Officer

Vulnerability Management Engineer

Technical Writer

Vulnerability Management Analyst

Identity Security Engineer – ITDR, CSPM

NERC CIP Virtualization Consultant