Dragonfli Group

Security Engineer

• Manage responsibility for security assessments of various applications or domains, including cloud computing.
• Implement security controls and conduct risk assessments based on NIST RMF and ISO standards.
• Support documentation, validation, and accreditation processes for IT systems.
• Ensure appropriate treatment of risk, compliance, and assurance.
• Develop actionable security blueprints, principles, models, designs, standards, and guidelines.
• Utilize network and vulnerability scanning tools to interrogate systems.
• Design, implement, and maintain secure IT infrastructures.
• Utilize GRC tools for managing Assessment & Authorization (A&A) processes.
• Serve as SME for the A&A process, providing guidance to stakeholders and business units.
• Build and maintain schedules and step-by-step action plans.
• Communicate and collaborate effectively with cross-functional teams and stakeholders.

Security Control Assessor

• Architect, configure, and maintain large-scale Splunk Enterprise and Splunk Cloud environments.
• Manage and automate Splunk knowledge objects including fields, extractions, tags, lookups, event types, workflow actions, macros, and aliases across environments.
• Develop, tune, and optimize complex SPL (Search Processing Language) queries, dashboards, and alerts for operational visibility and reporting.
• Lead system upgrades, patching, and performance tuning across clustered Splunk infrastructures.
• Integrate Splunk with external systems and data sources using REST APIs, scripting, and automation frameworks.
• Design and develop automated workflows and dashboard interfaces to streamline system management.
• Collaborate with DevOps and Security teams to maintain secure, reliable, and compliant data pipelines.
• Document architecture, configurations, and procedures for continuous improvement and audit readiness.
• Provide mentorship to junior engineers and contribute to the knowledge base of the monitoring platform.
• Participate in after-hours maintenance windows and on-call support rotations as needed.

Cybersecurity SME – Splunk

Backend Engineer

• Design, build, and maintain integrations between SailPoint IdentityIQ and enterprise applications.
• Develop and optimize database integration processes between SailPoint ISC and SailPoint IIQ through a middleware synchronization bridge.
• Configure and manage SailPoint integrations with Active Directory and other authoritative sources.
• Enable secure and reliable identity synchronization across connected and disconnected systems.
• Collaborate with business analysts, architects, and system owners to gather requirements and design scalable IAM solutions.
• Provide ongoing operational support for identity lifecycle operations, including provisioning and reconciliation.

SailPoint IIQ Developer, Java

• Implement cybersecurity strategies for digital identity protection.
• Manage identity and access management efforts using PAM solutions.
• Integrate and manage Beyond Trust and Okta tools.
• Develop knowledge objects in Splunk.
• Administer Windows and Linux systems.
• Automate processes using Python scripting.
• Manage directory services including Active Directory.
• Prepare and interpret technical flowcharts.
• Build and maintain schedules and action plans.
• Influence peer organizations and key stakeholders positively.

IAM/PAM Security Engineer

• Analyze data related to fraud resulting from identity verification and validation challenges
• Support existing teams in solving enterprise-level problems
• Architect and engineer Machine Learning/AI solutions for anomaly detection and entity behavior evaluation
• Improve data quality through advanced data modeling
• Implement Extract, Transform, Load (ETL) technologies
• Work with highly structured data
• Utilize data platforms and analytics tools such as Databricks and Zingg
• Develop data visualization packages
• Communicate and collaborate with multiple functional groups

Data Scientist – Identity Analytics, Fraud Detection, Python, Spark, Databricks

• Implement cybersecurity and IT asset lifecycle management strategies.
• Protect digital networks, connected assets, hosted applications, and data.
• Administer infrastructure, applications, and users within the Tanium environment.
• Support IT operations and security efforts including OS patching and application maintenance.
• Conduct vulnerability management and security event investigation.
• Develop and maintain asset visibility solutions for IT hardware and software.
• Engage with over 100,000 end-user and server systems.
• Collaborate with peer organizations and key stakeholders.

Senior Tanium Security, Asset Visibility Engineer

• Serve as the trusted security architect guiding industrial organizations through the complexities of Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity.
• Lead the design and implementation of secure architectures for SCADA, DCS, and PLC-based environments, ensuring safe, resilient, and compliant industrial operations.
• Partner with cross-functional IT and OT teams to close security gaps, integrate tools, and align operational risk management with industry standards such as NIST 800-82 and IEC 62443.
• Deploy and optimize leading security solutions including Claroty for asset discovery and vulnerability management, Palo Alto and Cradlepoint for secure networking, CrowdStrike for monitoring, BeyondTrust for privileged access, and Splunk/ServiceNow for visibility and incident management.
• Conduct consequence-based risk assessments, oversee vulnerability remediation programs, and ensure readiness for regulatory audits.
• Drive incident response preparedness by creating OT-specific playbooks and coordinating joint exercises across IT and OT teams.
• Deliver policies, training, and workshops that empower plant operators, engineers, and third-party vendors to uphold a strong cybersecurity posture.

Senior OT/ICS Cybersecurity Architect

• Serve as the trusted security architect guiding industrial organizations through the complexities of Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity.
• Lead the design and implementation of secure architectures for SCADA, DCS, and PLC-based environments, ensuring safe, resilient, and compliant industrial operations.
• Partner with cross-functional IT and OT teams to close security gaps, integrate tools, and align operational risk management with industry standards such as NIST 800-82 and IEC 62443.
• Deploy and optimize leading security solutions including Claroty for asset discovery and vulnerability management, Palo Alto and Cradlepoint for secure networking, CrowdStrike for monitoring, BeyondTrust for privileged access, and Splunk/ServiceNow for visibility and incident management.
• Conduct consequence-based risk assessments, oversee vulnerability remediation programs, and ensure readiness for regulatory audits.
• Drive incident response preparedness by creating OT-specific playbooks and coordinating joint exercises across IT and OT teams.
• Deliver policies, training, and workshops that empower plant operators, engineers, and third-party vendors to uphold a strong cybersecurity posture.
• Conduct security acceptance testing and validation of new or updated OT systems to ensure compliance with security requirements and industry best practices.
• Serve as a subject matter expert in client meetings, workshops, and presentations; lead project teams, mentor junior staff, and contribute to business development activities.

• Design and maintain enterprise-wide Splunk environments across hybrid infrastructure
• Lead the design, deployment, automation, and maintenance of Splunk in a complex hybrid infrastructure
• Develop complex dashboards, alerts, and searches using SPL
• Automate configuration, ingestion pipelines, and system performance tuning
• Integrate Splunk with cloud platforms (AWS, GCP, Azure) and external systems via APIs
• Troubleshoot ingest, parsing, and data integrity issues
• Guide data onboarding and architecture across large-scale projects
• Mentor junior engineers and support technical escalation
• Align Splunk capabilities with cybersecurity policies and compliance (FISMA, FedRAMP, NIST)
• Collaborate with cross-functional stakeholders from DevOps, Security, and IT Operations to ensure robust monitoring, system availability, and performance tuning at scale
• Provide operational support and real-time data analytics across on-premises and cloud environments
• Occasional off-hours or weekend support as needed

Cybersecurity Engineer, Splunk

• Dragonfli Group seeks a Network Infrastructure Security Specialist to join our team in supporting a large US Federal agency.
• Develop, document, and deploy security solutions leveraging AI/ML capabilities.
• Provide security guidelines based on existing security policies and standards to Network Ops and CISO.
• Monitor and validate network infrastructure practices for adherence to security policy and governance.
• Develop and document use cases for CSOC implementation.
• Coordinate within the group to interpret and issue guidance in accordance with known policies and governance.
• Engage stakeholders to identify or develop guidance and policy regarding their focus areas.
• Collaborate with network operations, SOC, and Enterprise security architecture teams.

Network Infrastructure Security Specialist

• Serve as the trusted security architect guiding industrial organizations through OT/ICS cybersecurity.
• Lead design and implementation of secure architectures for SCADA, DCS, and PLC-based environments, including network segmentation and secure remote access.
• Develop and document security reference architectures, blueprints, and roadmaps aligned with NIST 800-82 and IEC 62443.
• Evaluate, select, deploy, and optimize OT/ICS cybersecurity technologies (Claroty, Palo Alto, Cradlepoint, CrowdStrike, BeyondTrust, Splunk, ServiceNow).
• Conduct security acceptance testing and validation of OT systems to ensure compliance with security requirements and best practices.
• Perform consequence-based risk assessments (e.g., Cyber PHA) and lead vulnerability management and remediation programs.
• Design and implement OT/ICS security monitoring and integrate alerting with ServiceNow for incident management.
• Create OT-specific incident response playbooks and coordinate joint exercises across IT and OT teams.
• Deliver policies, training, and workshops for plant operators, engineers, and third-party vendors.
• Lead project teams, mentor junior staff, contribute to proposals and business development, and stay current on emerging OT/ICS threats.

• Remote contract role to implement, maintain, and enhance data protection controls across cloud, desktop, email, and enterprise systems for a large federal agency.
• Protect data from unauthorized access, modification, or destruction; develop and enforce IT security policies.
• Administer and support encryption technologies; manage digital certificates and certificate authorities.
• Script and automate tasks using APIs; respond to incidents; provide alerts and vendor advisories.
• Collaborate with IT professionals and end users; support SIEM integration; leverage Postgres SQL.
• Must be U.S. citizens or lawful permanent residents; preference for candidates in Morrisville, NC; Falls Church, VA; or Eagan, MN.

AI/ML Data Scientist, Fraud Detection and Cybersecurity

Consultant

• OT/ICS Security Architecture & Design: Lead the design and implementation of OT/ICS cybersecurity architectures, including network segmentation, secure remote access, and integration with IT security controls.
• Develop and document security reference architectures, blueprints, and roadmaps tailored to client environments and industry standards (e.g., NIST 800-82, IEC 62443).
• Evaluate, select, and deploy OT/ICS cybersecurity technologies, with hands-on experience in: Claroty for OT asset discovery and vulnerability management; Palo Alto and Cradlepoint for firewall configuration, segmentation, and secure connectivity; CrowdStrike for OT monitoring and threat detection; BeyondTrust for privileged secure remote access management; Familiarity with Cisco, ServiceNow, Splunk, CrowdStrike (Falcon Discover for IoT) and TxOne.
• Conduct security acceptance testing and validation of new or updated OT systems to ensure compliance with security requirements and industry best practices.
• Risk Assessment & Vulnerability Management: Perform consequence-based risk assessments for OT environments; lead vulnerability management; support regulatory readiness audits.
• Incident Response & Monitoring: Design and implement OT/ICS security monitoring; leverage CrowdStrike and Splunk; develop and test incident response plans; integrate with ServiceNow.
• Governance, Policy, and Training: Develop policies, standards; deliver training; advise on governance frameworks.
• Client Engagement & Leadership: Serve as SME in client meetings, lead project teams, mentor staff, contribute to business development; stay current on OT/ICS threats.

Cyber Operational Technology / Industrial Control Systems (OT/ICS) Senior Consultant

• Dragonfli Group is a cybersecurity and IT consulting firm headquartered in Washington, DC, serving federal and commercial clients nationwide.
• Lead the design, deployment, automation, and maintenance of Splunk in a complex hybrid infrastructure for a large federal agency.
• Provide operational support, Splunk integrations, security alignment, and real-time data analytics across on-premises and cloud environments.
• Collaborate with cross-functional stakeholders from DevOps, Security, and IT Operations to ensure robust monitoring, system availability, and performance tuning at scale.
• Mentor junior engineers and support technical escalation.
• Align Splunk capabilities with cybersecurity policies and compliance (FISMA, FedRAMP, NIST).
• Remote role (U.S. only) with potential occasional off-hours or weekend support.
• U.S. Citizenship or Permanent Residency is required.

Senior Splunk Cybersecurity Engineer – Architect/SME

• Implement and support encryption, DLP, and secure file sharing technologies
• Analyze and recommend tools to protect data at rest and in motion
• Provide technical leadership on projects involving data security policy and tools
• Collaborate with IT teams and stakeholders to deliver enterprise data protection solutions
• Automate security processes using APIs and custom scripting
• Proactively communicate on known risks, patches, and security advisories
• Participate in moderate to complex project work with minimal supervision
• Perform upgrades, configuration, and integration of data security tools
• Offer escalation support for high-severity incidents
• Maintain knowledge of modern IT architecture, including AI technologies

Data Security Specialist, Cloud and Encryption

• Drive visibility, automation, and security intelligence across one of the largest federal data environments
• Design and engineer national-scale Splunk infrastructure for mission-critical operations
• Architect and maintain enterprise-grade Splunk environments across on-prem and cloud platforms
• Create and manage knowledge objects, complex SPL queries, alerts, and dynamic dashboards
• Design and implement scalable data ingestion pipelines and parsing logic
• Collaborate with DevOps, Security, and Infrastructure teams to ensure optimal system performance
• Develop automation workflows and UI interfaces to enhance operational efficiency
• Troubleshoot data latency, availability, and integration challenges
• Support system maintenance, version upgrades, and environment hardening
• Contribute to technical mentorship and process documentation

Cybersecurity Engineer – Splunk SME

• Protect organizational data from unauthorized access, modification, or destruction.
• Develop and enforce IT security policies, standards, and procedures.
• Administer and support encryption technologies (Cloud, Desktop, Email, File Share).
• Provide guidance, recommendations, and best practices for data security.
• Manage and configure digital certificates and certificate authorities.
• Assist with upgrades, installations, testing, and configuration of data security components.
• Serve as a single point of escalation and remediation for critical data security issues.
• Script and automate tasks using APIs to integrate systems and streamline data exchange.
• Respond rapidly to unplanned incidents, including after-hours support when required.
• Proactively communicate alerts, technical updates, and vendor advisories.
• Collaborate with IT professionals and end users to design approved security solutions.
• Support integration with SIEM platforms; assist with knowledge objects and monitoring.
• Apply working knowledge of OS platforms, network protocols, and security architecture.
• Leverage Postgres SQL for queries, integration, and troubleshooting.

Cybersecurity Data Protection Engineer

• Dragonfli Group is a cybersecurity and IT consulting firm headquartered in Washington, DC, delivering strategic solutions to government agencies and enterprise clients nationwide.
• We specialize in AI/ML-driven behavioral analytics, insider risk detection, and enterprise risk mitigation.
• Our teams operate in diverse work environments—including on-site, hybrid, and fully remote—on contracts ranging from several months to multiple years.
• We are seeking a Behavioral Scientist to lead the design, development, and deployment of AI/ML-powered behavioral analytics models that detect anomalies, surface insider risk indicators, and mitigate cyber threats.
• This role blends advanced data science, behavioral research, and cybersecurity expertise to identify risky activities, model user behavior, and provide decision support to investigative and operational teams.
• The ideal candidate will possess strong technical skills, behavioral science expertise, and the ability to communicate complex insights to both technical and non-technical stakeholders.
• Key Responsibilities: Ensure ethical, responsible, and compliant AI development for behavioral analytics applications.
• Apply AI/ML techniques to analyze user and entity behavior, identifying anomalies and insider risk indicators across structured and unstructured datasets.
• Design and refine risk scoring algorithms to prioritize high-risk users or events.
• Integrate data from diverse systems, tools, and logs into unified risk models supporting investigative workflows.
• Conduct exploratory data analysis to detect behavioral trends and risk precursors.
• Build models and theories to explain behavior and design interventions to promote positive outcomes.
• Identify unusual employee or contractor activity potentially indicating malicious intent.
• Gather and prepare behavioral datasets from web, application, and other digital channels, ensuring data accuracy and completeness.
• Develop reports, dashboards, and visualizations to communicate findings to stakeholders.
• Enhance investigative capabilities through advanced anomaly detection and risk prioritization models.

Behavioral Scientist - Cybersecurity

Solutions Engineer

• Lead the design, integration, and optimization of AI/ML-powered security capabilities to detect, prevent, and respond to advanced cyber threats.
• Oversee and ensure compliance with AI-related security policies, secure development lifecycles, and vulnerability management processes.
• Conduct cybersecurity risk assessments, audits, program development, and incident response exercises involving AI systems.
• Establish secure development environments for AI platforms and integrated tools.
• Collaborate with AI/ML developers, security architects, legal, and business stakeholders to operationalize AI security strategies and comply with emerging legislation.
• Develop and deliver AI security training programs to raise awareness of risks and mitigation techniques.
• Perform threat modeling and risk assessments to identify vulnerabilities and recommend mitigation strategies.
• Design and implement security solutions such as DLP, SIEM, and endpoint monitoring to support insider threat detection and telemetry ingestion.
• Create and maintain security blueprints, principles, and standards to ensure secure, scalable IT architecture.
• Tune and optimize detection systems to reduce false positives and adapt to evolving behaviors and environments.
• Support secure deployment of behavioral analytics models with privacy and governance compliance.
• Engineer automated response capabilities for insider risk detection, including alerting and access control actions.

Cybersecurity Solutions Architect/Engineer, AI/ML & Cloud Security

• Dragonfli Group is a cybersecurity and IT consulting firm headquartered in Washington, DC, delivering strategic solutions to government agencies and enterprise clients nationwide.
• We specialize in risk management, assessment & authorization (A&A), cloud security, and enterprise IT architecture.
• Our teams operate in diverse work environments—including on-site, hybrid, and fully remote—on contracts ranging from several months to multiple years.
• We are seeking an Information System Security Officer (ISSO) to join our Assessment & Authorization (A&A) program supporting a federal agency focused on risk management and compliance.
• The ISSO will lead and manage security assessments across multiple applications, systems, and domains, including cloud environments.
• This role requires proven experience implementing security controls, conducting risk assessments, and documenting compliance in alignment with NIST Risk Management Framework (RMF) , ISO standards , and federal regulatory requirements.
• The ISSO will develop actionable security blueprints and governance frameworks, and ensure enterprise IT architecture meets both operational and security objectives.
• Key Responsibilities: Manage multiple large-scale A&A projects of high complexity and risk. Implement and validate security controls, ensuring compliance with organizational and regulatory standards. Conduct risk assessments, vulnerability scanning, and security architecture reviews. Support documentation, validation, and accreditation processes for IT systems. Utilize Governance, Risk, and Compliance (GRC) tools to manage A&A workflows. Develop security principles, standards, and guidelines for enterprise architecture. Provide subject matter expertise on assessment and authorization processes.
• Travel: Minimal, as required for project needs.
• Clearance Requirement: U.S. citizenship or lawful permanent residency required.
• AI Usage Policy: Candidates must be able to independently demonstrate technical proficiency without the use of AI tools during interviews or performance assessments.

Security Control Assessor

Cybersecurity SME – Splunk

SailPoint IIQ Developer, Java

IAM/PAM Security Engineer

Data Scientist – Identity Analytics, Fraud Detection, Python, Spark, Databricks

Senior Tanium Security, Asset Visibility Engineer

Senior OT/ICS Cybersecurity Architect

Senior OT/ICS Cybersecurity Architect

Cybersecurity Engineer, Splunk

Network Infrastructure Security Specialist

Senior OT/ICS Cybersecurity Architect

AI/ML Data Scientist, Fraud Detection and Cybersecurity

Cyber Operational Technology / Industrial Control Systems (OT/ICS) Senior Consultant

Senior Splunk Cybersecurity Engineer – Architect/SME

Data Security Specialist, Cloud and Encryption

Cybersecurity Engineer – Splunk SME

Cybersecurity Data Protection Engineer

Behavioral Scientist - Cybersecurity

Cybersecurity Solutions Architect/Engineer, AI/ML & Cloud Security

Information System Security Officer, ISSO