Functional CrowdStrike Analyst

This is an exempt position. Remote role with monthly travel required to Albany, NY. Duration: 12 months (with potential for extension). Start date: estimated September 15, 2026.

About the role

We are seeking a Functional CrowdStrike Analyst to support our NYS client in implementing a cloud-native application protection platform (CNAPP) solution, with a focus on CrowdStrike Falcon Cloud Security across Kubernetes and Amazon EKS environments. The consultant will partner with Technology and Cloud Engineering teams to configure, test, and tune cloud workload, posture, detection, entitlement, and container security controls. The position requires a 45-hour workweek.

Responsibilities

• Configure CrowdStrike Falcon Cloud Security and applicable CNAPP modules within the Falcon console for Kubernetes and Amazon EKS environments.
• Implement and maintain Kubernetes and EKS security policies, including posture, workload, runtime, admission-control, and container security controls.
• Establish Cloud Security Posture Management (CSPM) policies and tune Cloud Detection and Response (CDR) detections to align with security use cases.
• Configure Cloud Workload Protection (CWP), runtime security, and Cloud Infrastructure Entitlement Management (CIEM) capabilities across development, non-production, performance, and production environments.
• Execute end-to-end security use-case testing to validate image scanning, detection, containment, admission-control, entitlement analysis, and runtime protection functionality.
• Collaborate with Technology and Cloud Engineering teams on implementation decisions, technical findings, issue resolution, and CNAPP deployment activities.

Requirements

• 3+ years of experience configuring CrowdStrike Falcon Cloud Security and applicable CNAPP modules across Kubernetes and Amazon Elastic Kubernetes Service (EKS) environments.
• Hands-on experience configuring CrowdStrike Falcon Cloud Security and CNAPP modules in the Falcon console.
• Experience configuring Kubernetes and EKS security policies.
• Experience establishing Cloud Security Posture Management (CSPM) policies and tuning Cloud Detection and Response (CDR) detections.
• Experience configuring Cloud Workload Protection (CWP) and runtime security policies across development, non-production, performance, and production environments.
• Experience executing security use-case testing to validate detection, containment, and admission-control functionality.
• Experience implementing end-to-end container security, including image scanning, admission control, and runtime protection.
• Experience configuring Cloud Infrastructure Entitlement Management (CIEM) capabilities, including entitlement analysis.
• Experience with a CNAPP platform such as CrowdStrike Falcon, Wiz, or Palo Alto Networks Prisma Cloud.
• 2+ years of cloud experience.
• U.S. citizenship required by client.
• Ability to work a 45-hour workweek and travel approximately once per month.

Qualifications

• CrowdStrike Falcon experience is preferred.
• Strong AWS and AWS GovCloud experience, including IAM, IAM Roles for Service Accounts (IRSA), secure networking, GuardDuty, AWS Inspector, and AWS Key Management Service (KMS).
• Ability to communicate architecture, implementation decisions, and technical findings to leadership and client stakeholders.
• Awareness of NIST SP 800-53 Revision 5 and CMS ARC-AMPE guidance.
• CrowdStrike certifications.

Pay

W2 hourly rate: $65–$80/hour.

Schedule

Full-time, 45-hour workweek with monthly travel to Albany, NY.