Security Engineer (Insider Risk)

Dragonfli Group•Washington, DC

About The Position

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments. As a Senior-level Security Engineer focused on Insider Risk, you will be responsible for maturing and optimizing an Insider Threat operational support program. This role requires 7+ years of relevant experience in cyber-related fields, with at least 5 years dedicated to configuring and administering security tools. You will leverage a sophisticated technical stack—including DLP, UEBA, SIEM, and the Microsoft Purview/Defender suite—to monitor, detect, and mitigate potential internal threats. You will act as a bridge between technical implementation and executive reporting, developing playbooks and leading investigations into high-stakes security incidents. This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency required. If hired, all work related to this role must be performed within the continental U.S.

Requirements

Experience: 7+ years of relevant experience in a cyber-related field.
Tool Administration: 5+ years of experience specifically configuring and administering security tools.
Education: BS/BA in a cyber-related field (Direct experience or professional certifications may substitute for academic credentials).
Technical Proficiency: Demonstrated experience with Linux Operating Systems and Microsoft 365 environments.
Compliance Background: Experience thriving within heavily regulated environments (e.g., federal or financial sectors).
Citizenship: U.S. Citizenship or Permanent Residency is required.

Nice To Haves

Forensics: Experience in digital forensics and incident response (DFIR).
Federal Experience: Previous experience supporting large US federal agency contracts.

Responsibilities

Program Maturation: Assist in developing playbooks, workflows, and implementation roadmaps to mature the Insider Threat operational support program.
Tool Optimization: Administer and optimize the Insider Risk toolset, specifically DLP, UEBA, SIEM, and Microsoft Defender/Entra/Purview.
Risk Mitigation: Develop and maintain a convergence model to reduce risk to personnel and assets across regional operating divisions.
Incident Leadership: Lead and assist in the investigation of all incidents involving potential insider threats.
Stakeholder Coordination: Coordinate with business and technology leaders to develop programmatic solutions and deliver high-level presentations on findings.
Standards Compliance: Implement federal government and industry standards regarding insider threat programs and maintain programmatic gap analyses.