Senior Cybersecurity Consultant - MS Copilot & Power Platform

Dragonfli Group • Washington, DC

3h • Remote

About The Position

Dragonfli Group is seeking a hands-on Cyber Security Consultant to lead an AI Security Operating Capability workstream. This role involves helping a large federal agency establish the ability to review, approve, monitor, and secure AI use cases on the Microsoft Power Platform. The consultant will independently work with Microsoft Copilot Studio, Power Automate, and Dataverse to identify and configure security controls, manage client relationships, and facilitate knowledge transfer. This is a technical leadership position focused on hands-on configuration, not policy advice, requiring significant experience in cybersecurity and GRC, with a specific emphasis on configuring security controls within Microsoft Power Platform and Copilot environments.

Requirements

• Minimum ~7 years of cybersecurity/GRC experience, including demonstrated leadership of a technical security workstream.
• Strong, hands-on technical proficiency with Microsoft Copilot (including Copilot Studio) and the Power Platform (Power Automate, Dataverse) — able to independently navigate these platforms to identify where controls apply and configure/enable them directly, not just advise at a policy level.
• Working knowledge of Microsoft security suite tools (Entra, Purview) and how they integrate with Power Platform/Copilot environments.
• Demonstrated experience with security control design, testing, and runbook/technical documentation.
• Strong client-facing communication skills, with experience leading working sessions and delivering knowledge transfer.
• U.S. Citizenship or Permanent Residency.

Nice To Haves

• Prior experience on federal contracting engagements.
• Relevant certifications (e.g., CISSP, Security+, Microsoft SC-900/SC-401 or equivalent).
• Familiarity with AI/ML security risk domains and Microsoft security benchmarks/baselines.
• Experience directing or mentoring junior consultants within a workstream.

Responsibilities

• Lead the assessment of existing security tooling and identify gaps against AI-specific risk domains for Power Platform and Copilot.
• Identify and prioritize security controls aligned to Microsoft security benchmarks and industry best practices for Power Platform/Copilot Studio and connected AI use cases.
• Own execution of control configuration, testing, and documentation (runbooks) across selected AI use cases (chatbots, email automation, analytics/ML, computer vision) directly within Copilot Studio, Power Automate, Dataverse, and related Microsoft security tools (Entra, Purview).
• Document detailed control specifications (objective, description, owner, implementation guidance, evidence/testing method) and overlay implemented controls onto existing architecture documentation.
• Direct and quality-check the work of the supporting consultant on the workstream.
• Lead client-facing knowledge transfer sessions so the client's security team can operate controls and the intake process independently going forward.
• Serve as the primary point of contact and escalation path with client security and platform teams throughout configuration and validation.
• Report workstream status and risk to engagement leadership.

Benefits

• Medical: Multiple POS health plan options including an HSA-compatible plan
• Dental: PPO coverage for preventive, basic, and major services
• Vision: Annual exam, frames, lenses, and contact lens allowance
• 401(k): Employer match up to 5% of eligible compensation
• Long-Term Disability: 100% employer-paid coverage at 50% of pre-disability earnings
• Life Insurance & AD&D: 100% employer-paid coverage valued at $10,000 each
• PTO: 15–25 days annually based on tenure
• Paid Federal Holidays: All 11 federal holidays observed

What This Job Offers

• Career Level: Senior
• Education Level: No Education Listed