United States onlyDescription
Dragonfli Group is a cybersecurity and IT consulting firm based in Washington, DC. We support government and commercial enterprises with advanced technical services including cloud security, application modernization, and digital asset protection. Our team works across hybrid, remote, and on-site environments on projects that span several months to multiple years.
This role is for an IT Asset Visibility and Security Engineer supporting a large federal agency. You’ll be responsible for integrating enterprise-level security solutions that improve asset visibility and data protection across distributed environments. Candidates must bring at least 8 years of experience in IT security and have hands-on skills with Armis Centrix and Splunk, especially knowledge object development. The position is fully remote and may require occasional travel. U.S. citizenship or permanent residency is required.
This role is remote, requires U.S. citizenship or permanent residency
Responsibilities:
- Implement and optimize enterprise asset visibility and control strategies in support of a large federal cybersecurity program.
- Integrate and operationalize Armis Centrix to monitor and manage connected hardware and software assets across a complex, distributed IT environment.
- Configure, maintain, and enhance Splunk instances to support detection engineering, security event correlation, and dashboard/report generation using custom knowledge objects (e.g., event types, macros, saved searches).
- Engineer and support data pipelines to enable high-volume asset telemetry ingestion and correlation across visibility, compliance, and detection tools.
- Collaborate with cybersecurity, IT operations, and compliance stakeholders to align asset data workflows with broader risk management and regulatory efforts.
- Support Comply to Connect (C2C) and “Comply to Remain” strategies, ensuring continuous enforcement of asset trustworthiness across network access points.
- Contribute to vulnerability management, application control, and incident response by correlating asset visibility data with threat intelligence and telemetry.
- Perform Python scripting to automate security data transformation, extraction, validation, and workflow triggers.
- Apply system administration knowledge across Windows and Linux environments to assess asset posture, update detection content, and troubleshoot visibility gaps.
- Author, review, and maintain documentation for standard operating procedures, data flow diagrams, and implementation guides.
- Participate in security assessments, peer reviews, and customer briefings to present findings, advocate for improvements, and influence architecture decisions.
- Stay up to date on emerging visibility and telemetry tools, AI/ML applications in cybersecurity, and evolving compliance standards relevant to federal enterprise systems.
Requirements
- 8+ years of IT security experience in enterprise environments
- Hands-on experience with Armis Centrix and Splunk
- Python scripting and system automation
- Familiarity with Windows and Linux environments
- Bachelor’s degree in Computer Science, IT, or equivalent work experience
- Strong communication, documentation, and stakeholder engagement skills
Skill(s)
- Armis Centrix, Splunk (knowledge objects)
- Python automation, data pipeline design
- Application control, network access control
- Vulnerability management, Comply to Connect
- Windows/Linux administration
Benefits
- Health, Dental, Vision Insurance
- PTO + 11 Federal Holidays
- 401(k) with Employer Match
