Security Consultant

Kratos Defense & Security Solutions, Inc.; Herndon (VA); Hybrid; USD 100,000 - 115,000; Full time

Benefits offered by this job

Life Insurance

Disability Insurance

401(k) Savings Plan

Employee Stock Purchase Plan

Paid Time-Off

Holidays

Education Reimbursement

Job summary

Kratos Defense & Security Solutions, Inc. is seeking a Security Consultant for Commercial Cybersecurity Services to help secure cloud environments and assess security in on-prem and cloud infrastructures.

You will translate security requirements into practical implementations and support FedRAMP, DoD SRG, and NIST RMF assessments. The role requires a strong understanding of information security, 2+ years of cybersecurity experience, and relevant certifications.

Qualifications

• Minimum education level: High school diploma.
• Minimum 2 years cybersecurity experience.
• Required certifications: one or more of CySA+ CE, GCIH, GSNA, GCIA, CISA, CISSP or Associate, CSSLP, CISSO, CFR, CASP+ CE, Cloud+ CE, GICSP, SCYBER, BCR Cyber Technical Range, CCNA Security, CCNA Cyber Ops.

Responsibilities

• Support assessment teams conducting FedRAMP, DoD SRG, and NIST RMF security assessments.
• Review security packages for legacy FedRAMP Rev5 assessments (SSP, SAP, SAR, POA&M, deviation requests, SCRs, ConMon artifacts) and SDRs for 20x assessments.
• Validate CSP compliance with FedRAMP/DoD/NIST baselines through evidence review, testing, interviews, and analysis of scans.
• Support security reporting through detailed test procedures and findings.
• Conduct client interviews to assess operational and technical effectiveness of security controls.
• Evaluate cloud security implementations across AWS, Azure, Google, or other IaaS environments.

Skills

FedRAMP

DoD SRG

NIST RMF

Cloud security

Security assessments

Documentation

Written communication

Verbal communication

DoD clearance

Education

High school diploma

Job description

Do you take information technology (IT) and information security seriously and want to make a difference? Helping leading-edge technology companies secure their cloud environments is at the core of what we do, and we make a difference. As a Security Consultant of Commercial Cybersecurity Services for Kratos, you will be supporting teams of professionals working to evaluate and secure innovative cloud computing solutions on the most advanced cloud and on-premises infrastructures, by providing security consulting services and performing security assessments. The ideal candidate will have a firm understanding of how to apply and assess the principles of information security in a variety of circumstances and translate security requirements into common technical implementations. Must have previous experience Federal Risk and Authorization Management Program (FedRAMP) and cloud computing. Experience working with the Department of Defense (DoD) Cloud Service Provider (CSP) Security Requirements Guide (SRG) is preferred. While not required, experience working with other frameworks and publications, such as National Institute of Standards and Technology (NIST) Publications, Cybersecurity Maturity Model Certification (CMMC), etc.) is desirable.

Security Consultants may serve in a variety of roles, with responsibilities to include but not limited to:

• Support assessment teams conducting FedRAMP, DoD SRG, and NIST RMF security assessments.
• Review security packages for legacy FedRAMP Rev5 assessments (SSP, SAP, SAR, POA&M, deviation requests, SCRs, ConMon artifacts) and SDRs for 20x assessments.
• Validate Cloud Service Provider (CSP) compliance with FedRAMP/DoD/NIST security control baselines through review of evidence, testing, interviews, and analysis of scans.
• Support security reporting through creation of detailed test procedures and findings using standardized language and templates.
• Conduct client interviews to assess the operational and technical effectiveness of security controls.
• Evaluate cloud security implementations across AWS, Azure, Google, or other IaaS environments.

Experience and Skills

• Minimum education level needed: High school diploma.
• Minimum # of years of job-related experience needed (must match the job description): Two (2) years of cybersecurity experience.
• Required certification(s): Must have and maintain one (1) or more of the following certificates: CySA+ CE, GCIH, GSNA, GCIA, CISA, CISSP or Associate, CSSLP, CISSO, CFR, CASP+ CE, Cloud+ CE, GICSP, SCYBER, BCR Cyber Technical Range, CCNA Security, CCNA Cyber Ops.
• Understanding of NIST SP 800-53 Rev5, FedRAMP, DoD Cloud SRG, CNSSI, and the NIST RMF.
• Technical experience implementing security configuration, solutions, and/or cloud services.
• Ability to validate cloud-native security implementations (E.g., IAM, logging, encryption, network segmentation, etc.).
• Demonstrated ability to determine control effectiveness through documentation review, interviews, and technical testing.
• Strong writing skills with the ability to translate technical information into clear assessment procedures and findings.
• Strong verbal communication skills and ability to brief technical and non-technical audiences
• Ability to obtain a DoD Secret clearance or higher.

Preferred Skills/Experience

• Prior 3PAO or DoD assessor experience.
• Experience with automation, IaC, or cloud-native security tooling.
• Security clearance

#LI-Hybrid

Competitive salary based on experience and education

Salary Range: $100,000-$115,000

Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings—from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.

This posting will close within 90 days from the Posting Date.

• Life/ADD & Short/Long Term Disability Insurance
• 401(k) Savings Plan
• Employee Stock Purchase Plan (ESPP)
• Paid Time-Off (PTO)
• Holidays
• Education Reimbursement

Kratos Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race,color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as aprotected veteran, or any other protected category under applicable federal, state, and local laws.

Disability Accessibility Accommodation
If you require an accommodation to navigate or apply toour careers site, please send your request to [e-mail] or call 858-964-2916. Any inquiresnot related to requesting an accommodation will be discarded.

Pay Transparency
The company will not discharge or in any other manner discriminate againstemployees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay ofanother employee or applicant.

Job Applicant Privacy Notice
For applicants in the EU and California residents, please review our privacy notice .