{"id":2512860,"url":"https://alion.io/job/dragonfli-group-crowdstrike-falcon-security-engineer","title":"CrowdStrike Falcon Security Engineer","company":{"id":4430292,"name":"Dragonfli Group","domain":"dragonfligroup.com","url":"https://alion.io/company/dragonfli-group","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Washington, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":87000,"max_usd":175000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":84},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Kubernetes","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Wiz","optional":false},{"name":"AWS","optional":true},{"name":"IAM","optional":true}],"status":"live","first_seen_at":"2026-10-08T17:30:27Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-15T03:32:14Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Description\nDragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.\nWe are seeking a Senior Consultant with 3+ years of hands-on experience configuring CrowdStrike Falcon Cloud Security and its Cloud-Native Application Protection Platform (CNAPP) modules across Kubernetes and Amazon Elastic Kubernetes Service (EKS) environments. In this role, you will partner closely with the client's Technology and Cloud Engineering teams to implement and mature a CNAPP solution end to end - from Cloud Security Posture Management (CSPM) policy design through runtime workload protection. This is a hands-on, technically hands-in-the-console role, not an advisory-only engagement.\nThis is a contract position involving a large state government health agency. Candidates with previous public sector or government contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.\nJob Responsibilities:\nConfigure CrowdStrike Falcon Cloud Security and its applicable CNAPP modules in the Falcon console\nConfigure Kubernetes and Amazon EKS security policies\nEstablish Cloud Security Posture Management (CSPM) policies and tune Cloud Detection and Response (CDR) detections\nConfigure Cloud Workload Protection (CWP) and runtime security policies across development, non-production, performance, and production environments\nExecute security use-case testing to validate detection, containment, and admission-control functionality\nImplement end-to-end container security spanning image scanning, admission control, and runtime protection\nConfigure Cloud Infrastructure Entitlement Management (CIEM) capabilities, including entitlement analysis\nCommunicate architecture, implementation decisions, and technical findings to leadership and client stakeholders\nRequirements\nMust-Have:\n3+ years of hands-on experience configuring CrowdStrike Falcon Cloud Security and CNAPP modules (or a comparable CNAPP platform such as Wiz or Palo Alto Prisma Cloud), with CrowdStrike experience strongly preferred\nExperience configuring Kubernetes and Amazon EKS security policies\nExperience establishing CSPM policies and tuning CDR detections\nExperience configuring CWP and runtime security policies across development, non-production, performance, and production environments\nExperience executing security use-case testing to validate detection, containment, and admission-control functionality\nExperience implementing end-to-end container security (image scanning, admission control, runtime protection)\nExperience configuring CIEM capabilities, including entitlement analysis\nLegally authorized to work in the U.S.; able to perform all work within the continental U.S.\nAble to work primarily remote with travel approximately once per month\nPreferred / Nice-to-Have:\nStrong AWS and GovCloud platform experience: IAM, IAM Roles for Service Accounts (IRSA), secure networking, GuardDuty, AWS Inspector, AWS KMS\nAwareness of NIST SP 800-53 Revision 5 and CMS ARC-AMPE guidance\nCrowdStrike certifications\nPrior public-sector or government-contracting experience\nSkill(s)\nTechnical Skills:\nCrowdStrike Falcon Cloud Security / CNAPP configuration\nKubernetes and Amazon EKS security policy configuration\nCSPM policy development and CDR detection tuning\nCWP and runtime security policy configuration\nContainer security (image scanning, admission control, runtime protection)\nCIEM and entitlement analysis\nAWS / GovCloud security services (IAM, IRSA, GuardDuty, Inspector, KMS)\nSecurity use-case and detection-validation testing\nSoft Skills:\nCross-functional collaboration with Technology and Cloud Engineering teams\nClear technical communication to leadership and non-technical stakeholders\nIndependent, hands-on problem-solving in a live production environment\nHigh attention to detail given the security-critical nature of the work\nBenefits\nMedical - Multiple POS health plan options including an HSA-compatible plan\nDental - PPO coverage for preventive, basic, and major services\nVision - Annual exam, frames, lenses, and contact lens allowance\n401(k) - Employer match up to 5% of eligible compensation\nLong-Term Disability - 100% employer-paid coverage at 50% of pre-disability earnings\nLife Insurance & AD&D - 100% employer-paid coverage valued at $10,000 each\nPTO - 15-25 days annually based on tenure\nPaid Federal Holidays - All 11 federal holidays observed","description_format":"text","description_chars":4656,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-14T09:18:13Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":6,"expected_fill_days":27,"reasons":["conf:0","win:early"],"computed_at":"2026-10-15T03:53:33Z"},"pay":null,"html_url":"https://alion.io/job/dragonfli-group-crowdstrike-falcon-security-engineer","json_url":"https://alion.io/job/dragonfli-group-crowdstrike-falcon-security-engineer.json","meta":{"generated_at":"2026-10-15T03:53:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5510,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4430292},"rest":"https://alion.io/mcp/rest/get_company?id=4430292"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdragonfli-group-crowdstrike-falcon-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdragonfli-group-crowdstrike-falcon-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdragonfli-group-crowdstrike-falcon-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dragonfli-group-crowdstrike-falcon-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdragonfli-group-crowdstrike-falcon-security-engineer"}]}