Jobs and Careers

Insider Risk Subject Matter Expert (SME) and Program Manager

Washington, United StatesRemotefull_timeVerifiedPosted 14 Aug 2025

About the role

Description

Dragonfli Group is a cybersecurity and IT consulting firm headquartered in Washington, DC, delivering strategic solutions to government agencies and enterprise clients nationwide. We specialize in insider risk management, advanced threat detection, AI/ML-driven security operations, and enterprise risk reduction. Our teams operate in diverse work environments—including on-site, hybrid, and fully remote—on contracts ranging from several months to multiple years.

We are seeking an Insider Risk Subject Matter Expert (SME) and Program Manager to lead the development, implementation, and optimization of Insider Risk Management (IRM) strategies. This senior role combines program management, technical expertise, and AI/ML innovation to proactively detect, investigate, and mitigate insider threats. The ideal candidate will possess deep expertise in insider risk, experience with AI-powered detection platforms, and the ability to translate complex risk data into actionable, executive-level insights.

Key Responsibilities:

Develop and implement Insider Risk Management strategies, policies, procedures, and frameworks.
Design, manage, and optimize AI-powered detection models and UEBA platforms to identify anomalous user behaviors.
Build partnerships across business lines and technical teams to deliver AI-driven insider risk solutions.
Lead complex insider risk cases, triaging incidents and briefing leadership on findings and recommendations.
Conduct insider risk assessments, identify critical assets, and prioritize risks by impact and likelihood.
Oversee the creation and refinement of insider threat detection frameworks aligned with organizational policies and evolving threats.
Lead multidisciplinary teams, ensuring cohesive investigative and technical workflows.
Collaborate with stakeholders to refine playbooks, escalation protocols, and incident handling processes.
Deliver executive briefings, translating technical findings into strategic recommendations.
Ensure compliance with legal, ethical, and privacy considerations in insider monitoring and response.
Develop and deliver insider risk awareness and AI/ML training programs.

Requirements

Required Skills & Qualifications:

5–10+ years of experience in insider risk management, cybersecurity, or related fields.
Bachelor’s degree in computer science, information security, criminal justice, psychology, or related discipline.
Hands-on experience with UEBA platforms, SIEM, DLP, and digital forensics tools.
Strong knowledge of AI/ML applications in insider threat detection, including supervised/unsupervised learning, deep learning, and anomaly detection.
Proven leadership skills for directing investigative, analytical, and technical teams under pressure.
Experience developing AI detection models, rules, alerts, and risk scoring methodologies.
Familiarity with legal, compliance, and privacy considerations in insider threat programs.
Excellent communication and executive briefing skills.
Graduate-level certification in Insider Risk Management preferred.

Travel: Minimal, as required for project activities.

Clearance Requirement: U.S. citizenship or lawful permanent residency required.

AI Usage Policy: Candidates must be able to independently demonstrate technical proficiency without the use of AI tools during interviews or performance assessments.