Dragonfli Group

Security Engineer

• Configure CrowdStrike Falcon Cloud Security and applicable CNAPP modules in the Falcon console
• Configure Kubernetes and Amazon EKS security policies
• Establish CSPM policies and tune CDR detections
• Configure CWP and runtime security policies across development, non-production, performance, and production environments
• Execute security use-case testing to validate detection, containment, and admission-control functionality
• Implement end-to-end container security spanning image scanning, admission control, and runtime protection
• Configure CIEM capabilities, including entitlement analysis
• Communicate architecture, implementation decisions, and technical findings to leadership and client stakeholders
• Partner with the client's Technology and Cloud Engineering teams to implement and mature a CNAPP solution end to end
• Perform hands-on configuration and implementation in a live production environment

Security Engineer – CrowdStrike Falcon

• Configure CrowdStrike Falcon Cloud Security and applicable CNAPP modules in the Falcon console
• Configure Kubernetes and Amazon EKS security policies
• Establish CSPM policies and tune CDR detections
• Configure CWP and runtime security policies across development, non-production, performance, and production environments
• Execute security use-case testing to validate detection, containment, and admission-control functionality
• Implement end-to-end container security spanning image scanning, admission control, and runtime protection
• Configure CIEM capabilities, including entitlement analysis
• Communicate architecture, implementation decisions, and technical findings to leadership and client stakeholders
• Partner with client Technology and Cloud Engineering teams to implement and mature a CNAPP solution end to end

Senior Cloud Security Consultant – CrowdStrike Falcon

• Support assessment of existing security tooling and identify gaps against AI-specific risk domains for Power Platform and Copilot
• Help identify security controls aligned to Microsoft security benchmarks and industry best practices
• Assist in configuring and enabling security controls within Microsoft Copilot Studio, Power Automate, Dataverse, Entra, Purview, and related Microsoft security tools
• Execute control configuration, testing, and documentation/runbook tasks for selected AI use cases
• Document control specifications and maintain supporting evidence records
• Overlay implemented controls onto existing architecture documentation
• Prepare and participate in knowledge transfer sessions for the client's security team
• Collaborate with client security and platform teams during configuration and validation

Cybersecurity Consultant – MS Copilot, Power Platform

• Lead assessment of existing security tooling and identify gaps against AI-specific risk domains for Power Platform and Copilot
• Identify and prioritize security controls aligned to Microsoft security benchmarks and industry best practices
• Configure, test, and document controls across selected AI use cases in Copilot Studio, Power Automate, Dataverse, Entra, Purview, and related Microsoft security tools
• Document detailed control specifications and overlay implemented controls onto existing architecture documentation
• Direct and quality-check the supporting consultant’s workstream activities
• Lead client-facing knowledge transfer sessions so the client security team can operate controls and the intake process independently
• Serve as primary point of contact and escalation path with client security and platform teams
• Report workstream status and risk to engagement leadership

Senior Cybersecurity Consultant – MS Copilot, Power Platform

• Plan, implement, upgrade, and monitor security measures protecting agency networks, systems, and information
• Ensure appropriate security controls safeguard digital files and vital electronic infrastructure
• Design and develop security solutions for complex engineering, system administration, and network problems
• Perform systems management and integration functions, primarily in cloud environments
• Support integration and development of automated and AI-based solutions in complex cloud environments
• Assist in designing interface, quality assurance, and performance standards
• Perform cost-benefit analysis of modern information systems
• Analyze available technologies and recommend which to adopt and how best to apply them
• Support security engineering delivery to the agency's cybersecurity architecture and engineering function
• Maintain, research, enhance, and engineer the agency's cybersecurity environment and toolsets
• Contribute to resilient architecture integrating Zero Trust principles, including secure deployment, validation, and continuous monitoring of security controls
• Support Security Impact Assessments and maintain interconnection and data exchange security agreements for secure cloud service integration

QA Engineer

• Plan and execute authorized penetration tests across network, endpoint, wireless, database, application, and infrastructure environments
• Develop and tailor Rules of Engagement, Execution Plans, daily status updates, and final reporting inputs
• Coordinate with system owners, SOC personnel, and other stakeholders to confirm scope, test windows, prerequisites, safety thresholds, and stop/pause procedures
• Validate vulnerabilities arising from misconfigurations, outdated software, weak access controls, incomplete control implementation, and exploitable attack paths
• Support validation of CISA WAS, CISA FAST, KEV exposure, and external-facing asset findings
• Coordinate retesting to confirm closure
• Use approved automated and AI-enabled tools to improve reconnaissance, testing efficiency, ATT&CK/ATLAS mapping, evidence development, and reporting while maintaining human oversight
• Mentor junior testing staff
• Lead assessments independently with minimal oversight

Penetration Tester

• Own the security posture for assigned systems
• Advise on architecture, authorization boundaries, and risk decisions
• Lead control compliance and assessment readiness
• Maintain the System Security Plan and other key security artifacts
• Coordinate audits and assessments, including scheduling, evidence readiness, and responses to assessor findings
• Run continuous monitoring and reporting
• Define security metrics and escalate material risks and issues
• Drive vulnerability remediation and POA&M corrective actions, including exceptions, compensating controls, and risk acceptances
• Execute Risk Management Framework tasks across categorization, control selection, implementation, assessment, and authorization in accordance with NIST SP 800-37
• Support transition to and management of an Ongoing Authorization program
• Provide cybersecurity guidance to Business Owners and System Owners
• Liaise between stakeholders and cybersecurity staff
• Support System Owner system access reviews and account management compliance
• Apply automation and AI tooling to streamline RMF documentation, control assessments, and continuous monitoring activities

Mid-Level Information System Security Officer, ISSO

• Plan and execute authorized penetration tests across network, endpoint, wireless, database, application, and infrastructure environments
• Follow structured Planning, Discovery, Testing, and Reporting phases
• Develop and tailor Rules of Engagement, Execution Plans, daily status updates, and final reporting inputs
• Coordinate with system owners, SOC personnel, and other stakeholders on scope, test windows, prerequisites, safety thresholds, and stop/pause procedures
• Validate vulnerabilities arising from misconfigurations, outdated software, weak access controls, incomplete control implementation, and exploitable attack paths
• Support validation of CISA WAS, CISA FAST, KEV exposure, and external-facing asset findings
• Coordinate retesting to confirm closure
• Use approved automated and AI-enabled tools to improve reconnaissance, testing efficiency, ATT&CK/ATLAS mapping, evidence development, and reporting while maintaining human oversight
• Mentor junior testing staff
• Independently lead assessments with minimal oversight

Mid-Level Penetration Tester

• Support assessment planning by maintaining test schedules, scope records, stakeholder coordination notes, and required pre-assessment documentation
• Assist with controlled discovery, enumeration, testing support, and evidence capture within approved authorization boundaries
• Document findings, affected assets, ownership, reproducibility details, remediation recommendations, and retest requirements for final reports
• Support validation and triage of external-facing asset findings, CISA WAS and FAST results, KEV exposure items, and VDP submissions
• Coordinate daily status inputs, meeting notes, action tracking, and after-action support for assigned testing activities
• Use approved automation and AI-enabled tools to improve data collection, initial correlation, draft reporting, and testing workflow efficiency
• Provide analytical and hands-on support for authorized penetration testing activities for a large federal agency