Dragonfli Group

Security Engineer

• Serve as the trusted security architect guiding industrial organizations through OT/ICS cybersecurity.
• Lead design and implementation of secure architectures for SCADA, DCS, and PLC-based environments, including network segmentation and secure remote access.
• Develop and document security reference architectures, blueprints, and roadmaps aligned with NIST 800-82 and IEC 62443.
• Evaluate, select, deploy, and optimize OT/ICS cybersecurity technologies (Claroty, Palo Alto, Cradlepoint, CrowdStrike, BeyondTrust, Splunk, ServiceNow).
• Conduct security acceptance testing and validation of OT systems to ensure compliance with security requirements and best practices.
• Perform consequence-based risk assessments (e.g., Cyber PHA) and lead vulnerability management and remediation programs.
• Design and implement OT/ICS security monitoring and integrate alerting with ServiceNow for incident management.
• Create OT-specific incident response playbooks and coordinate joint exercises across IT and OT teams.
• Deliver policies, training, and workshops for plant operators, engineers, and third-party vendors.
• Lead project teams, mentor junior staff, contribute to proposals and business development, and stay current on emerging OT/ICS threats.

Senior OT/ICS Cybersecurity Architect

• Remote contract role to implement, maintain, and enhance data protection controls across cloud, desktop, email, and enterprise systems for a large federal agency.
• Protect data from unauthorized access, modification, or destruction; develop and enforce IT security policies.
• Administer and support encryption technologies; manage digital certificates and certificate authorities.
• Script and automate tasks using APIs; respond to incidents; provide alerts and vendor advisories.
• Collaborate with IT professionals and end users; support SIEM integration; leverage Postgres SQL.
• Must be U.S. citizens or lawful permanent residents; preference for candidates in Morrisville, NC; Falls Church, VA; or Eagan, MN.

AI/ML Data Scientist, Fraud Detection and Cybersecurity

Consultant

• OT/ICS Security Architecture & Design: Lead the design and implementation of OT/ICS cybersecurity architectures, including network segmentation, secure remote access, and integration with IT security controls.
• Develop and document security reference architectures, blueprints, and roadmaps tailored to client environments and industry standards (e.g., NIST 800-82, IEC 62443).
• Evaluate, select, and deploy OT/ICS cybersecurity technologies, with hands-on experience in: Claroty for OT asset discovery and vulnerability management; Palo Alto and Cradlepoint for firewall configuration, segmentation, and secure connectivity; CrowdStrike for OT monitoring and threat detection; BeyondTrust for privileged secure remote access management; Familiarity with Cisco, ServiceNow, Splunk, CrowdStrike (Falcon Discover for IoT) and TxOne.
• Conduct security acceptance testing and validation of new or updated OT systems to ensure compliance with security requirements and industry best practices.
• Risk Assessment & Vulnerability Management: Perform consequence-based risk assessments for OT environments; lead vulnerability management; support regulatory readiness audits.
• Incident Response & Monitoring: Design and implement OT/ICS security monitoring; leverage CrowdStrike and Splunk; develop and test incident response plans; integrate with ServiceNow.
• Governance, Policy, and Training: Develop policies, standards; deliver training; advise on governance frameworks.
• Client Engagement & Leadership: Serve as SME in client meetings, lead project teams, mentor staff, contribute to business development; stay current on OT/ICS threats.

Cyber Operational Technology / Industrial Control Systems (OT/ICS) Senior Consultant

• Drive visibility, automation, and security intelligence across one of the largest federal data environments
• Design and engineer national-scale Splunk infrastructure for mission-critical operations
• Architect and maintain enterprise-grade Splunk environments across on-prem and cloud platforms
• Create and manage knowledge objects, complex SPL queries, alerts, and dynamic dashboards
• Design and implement scalable data ingestion pipelines and parsing logic
• Collaborate with DevOps, Security, and Infrastructure teams to ensure optimal system performance
• Develop automation workflows and UI interfaces to enhance operational efficiency
• Troubleshoot data latency, availability, and integration challenges
• Support system maintenance, version upgrades, and environment hardening
• Contribute to technical mentorship and process documentation

Cybersecurity Engineer – Splunk SME

• Implement and support encryption, DLP, and secure file sharing technologies
• Analyze and recommend tools to protect data at rest and in motion
• Provide technical leadership on projects involving data security policy and tools
• Collaborate with IT teams and stakeholders to deliver enterprise data protection solutions
• Automate security processes using APIs and custom scripting
• Proactively communicate on known risks, patches, and security advisories
• Participate in moderate to complex project work with minimal supervision
• Perform upgrades, configuration, and integration of data security tools
• Offer escalation support for high-severity incidents
• Maintain knowledge of modern IT architecture, including AI technologies

Data Security Specialist, Cloud and Encryption

• Dragonfli Group is a cybersecurity and IT consulting firm headquartered in Washington, DC, serving federal and commercial clients nationwide.
• Lead the design, deployment, automation, and maintenance of Splunk in a complex hybrid infrastructure for a large federal agency.
• Provide operational support, Splunk integrations, security alignment, and real-time data analytics across on-premises and cloud environments.
• Collaborate with cross-functional stakeholders from DevOps, Security, and IT Operations to ensure robust monitoring, system availability, and performance tuning at scale.
• Mentor junior engineers and support technical escalation.
• Align Splunk capabilities with cybersecurity policies and compliance (FISMA, FedRAMP, NIST).
• Remote role (U.S. only) with potential occasional off-hours or weekend support.
• U.S. Citizenship or Permanent Residency is required.

Senior Splunk Cybersecurity Engineer – Architect/SME

• Protect organizational data from unauthorized access, modification, or destruction.
• Develop and enforce IT security policies, standards, and procedures.
• Administer and support encryption technologies (Cloud, Desktop, Email, File Share).
• Provide guidance, recommendations, and best practices for data security.
• Manage and configure digital certificates and certificate authorities.
• Assist with upgrades, installations, testing, and configuration of data security components.
• Serve as a single point of escalation and remediation for critical data security issues.
• Script and automate tasks using APIs to integrate systems and streamline data exchange.
• Respond rapidly to unplanned incidents, including after-hours support when required.
• Proactively communicate alerts, technical updates, and vendor advisories.
• Collaborate with IT professionals and end users to design approved security solutions.
• Support integration with SIEM platforms; assist with knowledge objects and monitoring.
• Apply working knowledge of OS platforms, network protocols, and security architecture.
• Leverage Postgres SQL for queries, integration, and troubleshooting.

Cybersecurity Data Protection Engineer

Solutions Engineer

• Lead the design, integration, and optimization of AI/ML-powered security capabilities to detect, prevent, and respond to advanced cyber threats.
• Oversee and ensure compliance with AI-related security policies, secure development lifecycles, and vulnerability management processes.
• Conduct cybersecurity risk assessments, audits, program development, and incident response exercises involving AI systems.
• Establish secure development environments for AI platforms and integrated tools.
• Collaborate with AI/ML developers, security architects, legal, and business stakeholders to operationalize AI security strategies and comply with emerging legislation.
• Develop and deliver AI security training programs to raise awareness of risks and mitigation techniques.
• Perform threat modeling and risk assessments to identify vulnerabilities and recommend mitigation strategies.
• Design and implement security solutions such as DLP, SIEM, and endpoint monitoring to support insider threat detection and telemetry ingestion.
• Create and maintain security blueprints, principles, and standards to ensure secure, scalable IT architecture.
• Tune and optimize detection systems to reduce false positives and adapt to evolving behaviors and environments.
• Support secure deployment of behavioral analytics models with privacy and governance compliance.
• Engineer automated response capabilities for insider risk detection, including alerting and access control actions.

Cybersecurity Solutions Architect/Engineer, AI/ML & Cloud Security

• Dragonfli Group is a cybersecurity and IT consulting firm headquartered in Washington, DC, delivering strategic solutions to government agencies and enterprise clients nationwide.
• We specialize in AI/ML-driven behavioral analytics, insider risk detection, and enterprise risk mitigation.
• Our teams operate in diverse work environments—including on-site, hybrid, and fully remote—on contracts ranging from several months to multiple years.
• We are seeking a Behavioral Scientist to lead the design, development, and deployment of AI/ML-powered behavioral analytics models that detect anomalies, surface insider risk indicators, and mitigate cyber threats.
• This role blends advanced data science, behavioral research, and cybersecurity expertise to identify risky activities, model user behavior, and provide decision support to investigative and operational teams.
• The ideal candidate will possess strong technical skills, behavioral science expertise, and the ability to communicate complex insights to both technical and non-technical stakeholders.
• Key Responsibilities: Ensure ethical, responsible, and compliant AI development for behavioral analytics applications.
• Apply AI/ML techniques to analyze user and entity behavior, identifying anomalies and insider risk indicators across structured and unstructured datasets.
• Design and refine risk scoring algorithms to prioritize high-risk users or events.
• Integrate data from diverse systems, tools, and logs into unified risk models supporting investigative workflows.
• Conduct exploratory data analysis to detect behavioral trends and risk precursors.
• Build models and theories to explain behavior and design interventions to promote positive outcomes.
• Identify unusual employee or contractor activity potentially indicating malicious intent.
• Gather and prepare behavioral datasets from web, application, and other digital channels, ensuring data accuracy and completeness.
• Develop reports, dashboards, and visualizations to communicate findings to stakeholders.
• Enhance investigative capabilities through advanced anomaly detection and risk prioritization models.

Behavioral Scientist - Cybersecurity

• Dragonfli Group is a cybersecurity and IT consulting firm headquartered in Washington, DC, delivering strategic solutions to government agencies and enterprise clients nationwide.
• We specialize in risk management, assessment & authorization (A&A), cloud security, and enterprise IT architecture.
• Our teams operate in diverse work environments—including on-site, hybrid, and fully remote—on contracts ranging from several months to multiple years.
• We are seeking an Information System Security Officer (ISSO) to join our Assessment & Authorization (A&A) program supporting a federal agency focused on risk management and compliance.
• The ISSO will lead and manage security assessments across multiple applications, systems, and domains, including cloud environments.
• This role requires proven experience implementing security controls, conducting risk assessments, and documenting compliance in alignment with NIST Risk Management Framework (RMF) , ISO standards , and federal regulatory requirements.
• The ISSO will develop actionable security blueprints and governance frameworks, and ensure enterprise IT architecture meets both operational and security objectives.
• Key Responsibilities: Manage multiple large-scale A&A projects of high complexity and risk. Implement and validate security controls, ensuring compliance with organizational and regulatory standards. Conduct risk assessments, vulnerability scanning, and security architecture reviews. Support documentation, validation, and accreditation processes for IT systems. Utilize Governance, Risk, and Compliance (GRC) tools to manage A&A workflows. Develop security principles, standards, and guidelines for enterprise architecture. Provide subject matter expertise on assessment and authorization processes.
• Travel: Minimal, as required for project needs.
• Clearance Requirement: U.S. citizenship or lawful permanent residency required.
• AI Usage Policy: Candidates must be able to independently demonstrate technical proficiency without the use of AI tools during interviews or performance assessments.