Note: The job is a remote job and is open to candidates in USA. Dragonfli Group is a cybersecurity and IT consulting firm serving federal agencies and Fortune 100 enterprises. The Senior Cloud Security Consultant will configure and mature CrowdStrike Falcon Cloud Security and CNAPP capabilities across Kubernetes and Amazon EKS environments, including CSPM, CDR, CWP, CIEM, container security, and runtime protection. The role also involves security testing and communicating technical decisions and findings to client stakeholders and leadership.
Responsibilities
- Configure CrowdStrike Falcon Cloud Security and its applicable CNAPP modules in the Falcon console
- Configure Kubernetes and Amazon EKS security policies
- Establish Cloud Security Posture Management (CSPM) policies and tune Cloud Detection and Response (CDR) detections
- Configure Cloud Workload Protection (CWP) and runtime security policies across development, non-production, performance, and production environments
- Execute security use-case testing to validate detection, containment, and admission-control functionality
- Implement end-to-end container security spanning image scanning, admission control, and runtime protection
- Configure Cloud Infrastructure Entitlement Management (CIEM) capabilities, including entitlement analysis
- Communicate architecture, implementation decisions, and technical findings to leadership and client stakeholders
Skills
- 3+ years of hands-on experience configuring CrowdStrike Falcon Cloud Security and its Cloud-Native Application Protection Platform (CNAPP) modules across Kubernetes and Amazon Elastic Kubernetes Service (EKS) environments
- U.S. Citizenship or Permanent Residency is required
- 3+ years of hands-on experience configuring CrowdStrike Falcon Cloud Security and CNAPP modules (or a comparable CNAPP platform such as Wiz or Palo Alto Prisma Cloud)
- Experience configuring Kubernetes and Amazon EKS security policies
- Experience establishing CSPM policies and tuning CDR detections
- Experience configuring CWP and runtime security policies across development, non-production, performance, and production environments
- Experience executing security use-case testing to validate detection, containment, and admission-control functionality
- Experience implementing end-to-end container security (image scanning, admission control, runtime protection)
- Experience configuring CIEM capabilities, including entitlement analysis
- Legally authorized to work in the U.S
- Strong AWS and GovCloud platform experience: IAM, IAM Roles for Service Accounts (IRSA), secure networking, GuardDuty, AWS Inspector, AWS KMS
- Awareness of NIST SP 800-53 Revision 5 and CMS ARC-AMPE guidance
- CrowdStrike Falcon Cloud Security / CNAPP configuration
- Kubernetes and Amazon EKS security policy configuration
- CSPM policy development and CDR detection tuning
- CWP and runtime security policy configuration
- Container security (image scanning, admission control, runtime protection)
- CIEM and entitlement analysis
- AWS / GovCloud security services (IAM, IRSA, GuardDuty, Inspector, KMS)
- Security use-case and detection-validation testing
- Cross-functional collaboration with Technology and Cloud Engineering teams
- Clear technical communication to leadership and non-technical stakeholders
- Independent, hands-on problem-solving in a live production environment
- High attention to detail given the security-critical nature of the work
- Candidates with previous public sector or government contracting experience are preferred
- CrowdStrike experience strongly preferred
- CrowdStrike certifications
- Prior public-sector or government-contracting experience
Benefits
- Medical — Multiple POS health plan options including an HSA-compatible plan
- Dental — PPO coverage for preventive, basic, and major services
- Vision — Annual exam, frames, lenses, and contact lens allowance
- 401(k) — Employer match up to 5% of eligible compensation
- Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings
- Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each
- PTO — 15–25 days annually based on tenure
- Paid Federal Holidays — All 11 federal holidays observed
Company Overview