Teams at Dragonfly AI

Supports cybersecurity engineering for a federal cloud modernization program. Responsibilities include implementing and monitoring security controls, cloud systems integration, automation, AI-assisted tooling, configuration hardening, vulnerability management, evidence collection, control testing, STIG and baseline artifact maintenance, and technical documentation. The role is fully remote and requires collaboration with senior engineers, system owners, developers, and assessors.

Support federal cybersecurity governance, risk, and compliance activities across the NIST RMF lifecycle. Conduct security control assessments, risk analyses, POA&M reviews, authorization support, and mitigation tracking. Maintain cyber risk registers, dashboards, and FISMA reporting while supporting IRM, SCRM, and TPRM programs. Present technical findings and recommendations to technical and non-technical stakeholders, using Power BI and automation tools to improve compliance reporting and risk visibility.

Plan and independently execute authorized penetration tests across network, endpoint, wireless, database, application, and infrastructure environments. Develop Rules of Engagement, execution plans, status updates, and formal reports; coordinate scope and safety procedures with system owners and SOC teams; validate vulnerabilities and exploit chains; support CISA WAS, FAST, and KEV retesting; apply ATT&CK/ATLAS mapping and AI-enabled tools with human oversight; and mentor junior testers.