Security Engineer – CrowdStrike Falcon

This is a fully remote position, open to applicants in United States.

📋 Description

• Set up CrowdStrike Falcon Cloud Security along with relevant CNAPP modules in the Falcon console.

• Establish security policies for Kubernetes and Amazon EKS.

• Develop CSPM policies and refine CDR detections.

• Implement CWP and runtime security policies across various environments including development, non-production, performance, and production.

• Conduct security use-case testing to verify detection, containment, and admission-control capabilities.

• Execute comprehensive container security measures, including image scanning, admission control, and runtime protection.

• Configure CIEM functionalities, such as entitlement analysis.

• Relay architecture, implementation choices, and technical insights to leadership and client stakeholders.

• Collaborate with the client's Technology and Cloud Engineering teams to effectively implement and enhance a CNAPP solution from start to finish.

• Carry out hands-on configuration and implementation in an active production environment.

⛳️ Requirements

• Over 3 years of practical experience configuring CrowdStrike Falcon Cloud Security and CNAPP modules, or a similar CNAPP platform like Wiz or Palo Alto Prisma Cloud.

• Proven experience in configuring security policies for Kubernetes and Amazon EKS.

• Background in establishing CSPM policies and adjusting CDR detections.

• Hands-on experience with CWP and runtime security policies across various environments including development, non-production, performance, and production.

• Experience in conducting security use-case testing for validating detection, containment, and admission-control functionalities.

• Proven ability to implement comprehensive container security, encompassing image scanning, admission control, and runtime protection.

• Experience in configuring CIEM functionalities, including entitlement analysis.

• Must be legally authorized to work in the U.S.

• Capable of performing all tasks within the continental U.S.

• Primarily remote work with travel required approximately once per month.

• Strong experience with AWS and GovCloud platforms, including IAM, IAM Roles for Service Accounts (IRSA), secure networking, GuardDuty, AWS Inspector, and AWS KMS.

• Familiarity with NIST SP 800-53 Revision 5 and CMS ARC-AMPE guidance.

• Possession of CrowdStrike certifications.

• Prior experience in the public sector or government contracting.

🏝️ Benefits

• Medical — Diverse POS health plan options available, including an HSA-compatible plan.

• Dental — PPO coverage for preventive, basic, and major dental services.

• Vision — Coverage for an annual exam, frames, lenses, and a contact lens allowance.

• 401(k) — Employer matching up to 5% of eligible compensation.

• Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings.

• Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each.

• PTO — 15–25 days per year based on tenure.

• Paid Federal Holidays — All 11 federal holidays are recognized.