Remote CrowdStrike Cloud Security Analyst (CNAPP)

Cloud and Things; City of Albany (NY); On-site; USD 90,000 - 110,000; Full time

Job summary

Cloud and Things seeks a Functional CrowdStrike Analyst to support our NYS client in a remote, 12‑month assignment. The role centers on implementing a CNAPP solution with CrowdStrike Falcon Cloud Security across Kubernetes and Amazon EKS environments.

You will configure policies, posture, detections, entitlement and container security, test use cases end-to-end and collaborate with Technology and Cloud Engineering teams. The position requires U.S.

Qualifications

• 3+ years of experience configuring CrowdStrike Falcon Cloud Security and CNAPP modules across Kubernetes and Amazon EKS environments.
• Experience configuring Kubernetes and EKS security policies.
• Experience establishing CSPM policies and tuning CDR detections.
• Experience configuring CWP and runtime security policies across environments.
• Experience executing security use-case testing to validate detection and containment.

Responsibilities

• Configure CrowdStrike Falcon Cloud Security and CNAPP modules within the Falcon console for Kubernetes and Amazon EKS.
• Implement and maintain Kubernetes and EKS security policies, including posture, workload, runtime, admission-control, and container security controls.
• Establish CSPM policies and tune CDR detections to align with security use cases.
• Configure CWP, runtime security, and CIEM capabilities across environments.
• Execute end-to-end security use-case testing for image scanning, detection, containment, and runtime protection.
• Collaborate with Technology and Cloud Engineering teams on implementation decisions and CNAPP deployment activities.

Skills

CrowdStrike Falcon Cloud Security

CNAPP concepts

Kubernetes

Amazon EKS

CSPM

CDR

CWP

CIEM

image scanning

admission-control

runtime protection

entitlement analysis

security testing

communication to leadership

Tools

CrowdStrike Falcon Cloud Security

Kubernetes

Amazon EKS

IRSA

IAM

GuardDuty

AWS Inspector

KMS

Job description

Our goal is to solve problems and deliver results for our clients. At Cloud and Things, you can be a part of transforming the public sector’s IT environment. Our team is on the forefront of helping to solve the government's most complex IT challenges. If you are seeking a role that offers the opportunity to work on rewarding projects, consider a career with Cloud and Things.

*This is an exempt position. Salarycommensuratewith experience*

Job Title: Functional CrowdStrike Analyst
Location: Remote (monthly travel required to Albany, NY)
Duration: 12 months (with potential for extension)
Start Date: Estimated - September 15, 2026
W2 Hourly Rate: $65-$80/hour
Application Deadline: August 21, 2026


Overview:

We are seeking a Functional CrowdStrike Analyst who will support our NYS client.
This full-time, remote role will support the implementation of a cloud-native application protection platform (CNAPP) solution, with a focus on CrowdStrike Falcon Cloud Security across Kubernetes and Amazon EKS environments. The consultant will partner with Technology and Cloud Engineering teams to configure, test, and tune cloud workload, posture, detection, entitlement, and container security controls. The position requires a 45-hour workweek and travel approximately once per month.


Duties:

• Configure CrowdStrike Falcon Cloud Security and applicable CNAPP modules within the Falcon console for Kubernetes and Amazon EKS environments.
• Implement and maintain Kubernetes and EKS security policies, including posture, workload, runtime, admission-control, and container security controls.
• Establish Cloud Security Posture Management (CSPM) policies and tune Cloud Detection and Response (CDR) detections to align with security use cases.
• Configure Cloud Workload Protection (CWP), runtime security, and Cloud Infrastructure Entitlement Management (CIEM) capabilities across development, non-production, performance, and production environments.
• Execute end-to-end security use-case testing to validate image scanning, detection, containment, admission-control, entitlement analysis, and runtime protection functionality.
• Collaborate with Technology and Cloud Engineering teams on implementation decisions, technical findings, issue resolution, and CNAPP deployment activities.
  

Mandatory Qualifications:

• 3+ years of experience configuring CrowdStrike Falcon Cloud Security and applicable CNAPP modules across Kubernetes and Amazon Elastic Kubernetes Service (EKS) environments.
• Hands-on experience configuring CrowdStrike Falcon Cloud Security and CNAPP modules in the Falcon console.
• Experience configuring Kubernetes and EKS security policies.
• Experience establishing Cloud Security Posture Management (CSPM) policies and tuning Cloud Detection and Response (CDR) detections.
• Experience configuring Cloud Workload Protection (CWP) and runtime security policies across development, non-production, performance, and production environments.
• Experience executing security use-case testing to validate detection, containment, and admission-control functionality.
• Experience implementing end-to-end container security, including image scanning, admission control, and runtime protection.
• Experience configuring Cloud Infrastructure Entitlement Management (CIEM) capabilities, including entitlement analysis.
• Experience with a CNAPP platform such as CrowdStrike Falcon, Wiz, or Palo Alto Networks Prisma Cloud.
• 2+ years of cloud experience.
• U.S. citizenship required by client.
• Ability to work a 45-hour workweek and travel approximately once per month.
  

Desirable Qualifications:

• CrowdStrike Falcon experience is preferred.
• Strong AWS and AWS GovCloud experience, including IAM, IAM Roles for Service Accounts (IRSA), secure networking, GuardDuty, AWS Inspector, and AWS Key Management Service (KMS).
• Ability to communicate architecture, implementation decisions, and technical findings to leadership and client stakeholders.
• Awareness of NIST SP 800-53 Revision 5 and CMS ARC-AMPE guidance.
• CrowdStrike certifications.
  
  
  

Ready to make a difference?

We’re eager to connect with qualified candidates committed to delivering results and fostering excellence within client projects.



Cloud and Things complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race,color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws.

AI-Assisted Resume Evaluation Notice
Cloud and Things – Talent Management

Notice to Candidates

Cloud and Things utilizes artificial intelligence (AI) tools to assist our recruiting team in evaluating candidate applications for streamlining; consistency, efficiency, and thoroughness. All hiring decisions are ultimately made by our human recruiting professionals.

How AI Is Used

Our AI tools assist by:

• Analyzing resumes against job requirements
• Supporting our recruiters in candidate data evaluation
• Ensuring consistent review standards across all applications
• Important: AI serves as a support tool only. As noted above, all candidate selection and hiring decisions are made by experienced human recruiters. Your unedited resume will be processed by our AI tools as part of this evaluation.
  
  

Your Data and Privacy

Cloud and Things Data Handling:

• Your information is processed securely and used exclusively for recruitment purposes
• Cloud and Things may store your resume in our Applicant Tracking System (ATS) indefinitely for future job matching opportunities
• You may opt out of long-term ATS storage by emailing your name and your request to opt out of storing your resume in the ATS to: [e-mail]
• All personal information is handled confidentially in accordance with our privacy policy
  

AI Tool Data Processing:

• AI processing data is retained for a maximum of 90 days, after which it is deleted
• All data sent to AI tools is encrypted in transit and at rest
• AI tools comply with applicable privacy laws including GDPR and CCPA
• Personal data is anonymized or minimized wherever possible during AI processing
  

Your Participation

By submitting your application, you acknowledge this notice and consent to AI-assisted evaluation as part of our recruitment process. You may opt out only by choosing not to submit your resume for consideration.