Note: The job is a remote job and is open to candidates in USA. Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. They are seeking a highly experienced CrowdStrike ITDR / Cloud Security Subject Matter Expert to take ownership of the Identity Threat Detection & Response and Cloud-Native Application Protection domains, proactively identifying threats and driving improvements in the agency's security posture.
Responsibilities
- Own end-to-end strategy, implementation, and operational health of CrowdStrike Falcon Identity Protection and the CSPM capabilities within CrowdStrike Cloud Security
- Proactively identify identity-based threats, misconfigurations, and cloud security gaps; drive remediation to closure in accordance with client policies and procedures
- Configure, tune, and maintain identity protection policies, IOM and IOA policies, and risk-based authentication controls
- Serve as the escalation point and trusted technical advisor to client leadership on identity and cloud security matters
- Develop runbooks, detection logic, and automation to reduce manual effort and improve response times
- Monitor the threat landscape and translate emerging risks into actionable hardening recommendations
- Coordinate and lead governance calls with stakeholders; produce agenda, notes, and follow-up actions independently
- Partner with other cybersecurity teams to integrate CrowdStrike telemetry into broader security operations
- Produce metrics, dashboards, and executive-level reporting on identity and cloud security posture
- Apply deep knowledge of identity-based attack techniques — including lateral movement, credential theft, Kerberoasting, and pass-the-hash — to inform detection and response strategy
Skills
- 7+ years of cybersecurity experience with a minimum of 2–3 years of hands-on administration of the CrowdStrike Falcon platform
- Demonstrated expertise with CrowdStrike Falcon Identity Protection, including policy configuration, threat detection, and conditional access
- Strong working knowledge of CrowdStrike Cloud Security, specifically CSPM
- Deep understanding of identity and access management concepts: Active Directory, Azure AD/Entra ID, LDAP, Kerberos, SAML, and OAuth
- Hands-on cloud security experience with Microsoft Azure including IAM, network security, and posture management
- Solid understanding of privileged access management and identity-based attack techniques (lateral movement, credential theft, Kerberoasting, pass-the-hash)
- Proven ability to work autonomously, set priorities, and drive outcomes without close supervision
- Strong written and verbal communication skills, including ability to explain technical risk to non-technical stakeholders
- Background in consulting or client-facing delivery roles
- Bachelor's degree in a related field or equivalent practical experience (4 additional years of relevant experience)
- At least one of the following active certifications: CWNE, CNDA (EC-Council), CEH (EC-Council), GPPA (GIAC), GCUX (GIAC), GCWN (GIAC), GMON (GIAC), GSE (GIAC), ITIL v3 Foundations, CCSP (ISC2), CISSP (ISC2), CISSP-ISSAP (ISC2), CISSP-ISSEP (ISC2), SSCP (ISC2), GWEB (GIAC), GISF (GIAC), GISP (GIAC), GSSP-.NET (GIAC), GSSP-JAVA (GIAC), GSEC (GIAC), or GSLC (GIAC)
- US Citizenship or Permanent Residency required; must be eligible for and willing to obtain a public trust clearance
- All work must be performed within the continental United States
- CrowdStrike Certified Cyber Security (CCCS) certification
- Experience with Splunk and ServiceNow SOMS
- Familiarity with Zero Trust architecture and frameworks including NIST and MITRE ATT&CK
- Experience integrating CrowdStrike with third-party identity and security tooling
- Previous federal contracting experience
Benefits
- Medical — Multiple POS health plan options including an HSA-compatible plan
- Dental — PPO coverage for preventive, basic, and major services
- Vision — Annual exam, frames, lenses, and contact lens allowance
- 401(k) — Employer match up to 5% of eligible compensation
- PTO — 15–25 days annually based on tenure
- Paid Federal Holidays — All 11 federal holidays observed
Company Overview
The Dragonfli Group is a Washington, DC based LLC specializing in management and technology consulting. It was founded in 2008, and is headquartered in Washington, District of Columbia, USA, with a workforce of 11-50 employees. Its website is https://www.dragonfligroup.com/.