Security Consultant

Kratos Space Training & Cyber; Herndon (VA); Hybrid; USD 100,000 - 115,000; Full time

Benefits offered by this job

Hybrid work arrangement

Competitive salary by experience

Job summary

Kratos Defense seeks a Security Consultant for Commercial Cybersecurity Services to support FedRAMP, DoD SRG, and NIST RMF assessments and security reviews across major cloud providers. You will review evidence, perform testing, and translate security findings into actionable remediation steps.

The ideal candidate has FedRAMP and cloud experience, strong writing and briefing skills, and the ability to obtain a DoD Secret clearance. Hybrid work with competitive compensation is offered.

Qualifications

• Two years of cybersecurity experience
• Must hold one or more listed certifications
• Knowledge of NIST SP 800-53 Rev5, FedRAMP, DoD SRG
• Ability to obtain DoD Secret clearance or higher

Responsibilities

• Support FedRAMP, DoD SRG, and NIST RMF security assessments.
• Review security packages (SSP, SAP, SAR, POA&M) and SDRs for FedRAMP/DoD.
• Validate CSP compliance with FedRAMP/DoD/NIST baselines through evidence reviews and testing.
• Prepare detailed test procedures and findings using standardized templates.
• Conduct client interviews to assess operational and technical effectiveness of controls.
• Evaluate cloud security implementations across AWS, Azure, Google Cloud and other IaaS environments.

Skills

Strong writing

Strong communication

Security clearance

FedRAMP knowledge

Education

High school diploma

CySA+ / CISSP / CISA / CCNA Security certifications

CISSP / CCSP / GIAC certifications

Job description

Do you take information technology (IT) and information security seriously and want to make a difference? Helping leading-edge technology companies secure their cloud environments is at the core of what we do, and we make a difference. As a Security Consultant of Commercial Cybersecurity Services for Kratos, you will be supporting teams of professionals working to evaluate and secure innovative cloud computing solutions on the most advanced cloud and on-premises infrastructures, by providing security consulting services and performing security assessments. The ideal candidate will have a firm understanding of how to apply and assess the principles of information security in a variety of circumstances and translate security requirements into common technical implementations. Must have previous experience Federal Risk and Authorization Management Program (FedRAMP) and cloud computing. Experience working with the Department of Defense (DoD) Cloud Service Provider (CSP) Security Requirements Guide (SRG) is preferred. While not required, experience working with other frameworks and publications, such as National Institute of Standards and Technology (NIST) Publications, Cybersecurity Maturity Model Certification (CMMC), etc.) is desirable.

Security Consultants may serve in a variety of roles, with responsibilities to include but not limited to:

• Support assessment teams conducting FedRAMP, DoD SRG, and NIST RMF security assessments.
• Review security packages for legacy FedRAMP Rev5 assessments (SSP, SAP, SAR, POA&M, deviation requests, SCRs, ConMon artifacts) and SDRs for 20x assessments.
• Validate Cloud Service Provider (CSP) compliance with FedRAMP/DoD/NIST security control baselines through review of evidence, testing, interviews, and analysis of scans.
• Support security reporting through creation of detailed test procedures and findings using standardized language and templates.
• Conduct client interviews to assess the operational and technical effectiveness of security controls.
• Evaluate cloud security implementations across AWS, Azure, Google, or other IaaS environments.

Keyword: Authorization, Provisional Authorization, FedRAMP JAB, NIST 800-53, DoD CC SRG, Security Assessment Report, Assessment Test Procedures, Continuous Monitoring

Required Experience:

• Minimum education level needed: High school diploma.
• Minimum # of years of job-related experience needed (must match the job description): Two (2) years of cybersecurity experience.
• Required certification(s): Must have and maintain one (1) or more of the following certificates: CySA+ CE, GCIH, GSNA, GCIA, CISA, CISSP or Associate, CSSLP, CISSO, CFR, CASP+ CE, Cloud+ CE, GICSP, SCYBER, BCR Cyber Technical Range, CCNA Security, CCNA Cyber Ops.
• Understanding of NIST SP 800-53 Rev5, FedRAMP, DoD Cloud SRG, CNSSI, and the NIST RMF.
• Technical experience implementing security configuration, solutions, and/or cloud services.
• Ability to validate cloud-native security implementations (E.g., IAM, logging, encryption, network segmentation, etc.).
• Demonstrated ability to determine control effectiveness through documentation review, interviews, and technical testing.
• Strong writing skills with the ability to translate technical information into clear assessment procedures and findings.
• Strong verbal communication skills and ability to brief technical and non-technical audiences.
• Ability to obtain a DoD Secret clearance or higher.

Preferred Skills/Experience

• Prior 3PAO or DoD assessor experience.
• Experience with automation, IaC, or cloud-native security tooling.
• AI Familiarity
• Security clearance

LI-Hybrid

Competitive salary based on experience and education

Salary Range: $100,000-$115,000

Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offeringsifrom commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.

This posting will close within 90 days from the Posting Date.

From: Kratos Defense