CrowdStrike Falcon Security Engineer

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. The Senior CrowdStrike Falcon Security Engineer will configure and mature CNAPP capabilities across Kubernetes and Amazon EKS environments, including CSPM, CWP, CIEM, container security, runtime protection, and detection validation. The role also involves communicating architecture, implementation decisions, and technical findings to leadership and client stakeholders.

Responsibilities:

• Configure CrowdStrike Falcon Cloud Security and its applicable CNAPP modules in the Falcon console
• Configure Kubernetes and Amazon EKS security policies
• Establish Cloud Security Posture Management (CSPM) policies and tune Cloud Detection and Response (CDR) detections
• Configure Cloud Workload Protection (CWP) and runtime security policies across development, non-production, performance, and production environments
• Execute security use-case testing to validate detection, containment, and admission-control functionality
• Implement end-to-end container security spanning image scanning, admission control, and runtime protection
• Configure Cloud Infrastructure Entitlement Management (CIEM) capabilities, including entitlement analysis
• Communicate architecture, implementation decisions, and technical findings to leadership and client stakeholders

Requirements:

• 3+ years of hands-on experience configuring CrowdStrike Falcon Cloud Security and its Cloud-Native Application Protection Platform (CNAPP) modules across Kubernetes and Amazon Elastic Kubernetes Service (EKS) environments
• U.S. Citizenship or Permanent Residency is required
• Experience configuring Kubernetes and Amazon EKS security policies
• Experience establishing CSPM policies and tuning CDR detections
• Experience configuring CWP and runtime security policies across development, non-production, performance, and production environments
• Experience executing security use-case testing to validate detection, containment, and admission-control functionality
• Experience implementing end-to-end container security (image scanning, admission control, runtime protection)
• Experience configuring CIEM capabilities, including entitlement analysis
• Legally authorized to work in the U.S
• Strong AWS and GovCloud platform experience: IAM, IAM Roles for Service Accounts (IRSA), secure networking, GuardDuty, AWS Inspector, AWS KMS
• Awareness of NIST SP 800-53 Revision 5 and CMS ARC-AMPE guidance
• CrowdStrike Falcon Cloud Security / CNAPP configuration
• Kubernetes and Amazon EKS security policy configuration
• CSPM policy development and CDR detection tuning
• CWP and runtime security policy configuration
• Container security (image scanning, admission control, runtime protection)
• CIEM and entitlement analysis
• AWS / GovCloud security services (IAM, IRSA, GuardDuty, Inspector, KMS)
• Security use-case and detection-validation testing
• Cross-functional collaboration with Technology and Cloud Engineering teams
• Clear technical communication to leadership and non-technical stakeholders
• Independent, hands-on problem-solving in a live production environment
• High attention to detail given the security-critical nature of the work
• Candidates with previous public sector or government contracting experience are preferred
• CrowdStrike experience strongly preferred
• CrowdStrike certifications
• Prior public-sector or government-contracting experience