Security Consultant

Minimum education level needed: High school diploma.

Minimum # of years of job-related experience needed (must match the job description): Two (2) years of cybersecurity experience.

Required certification(s): Must have and maintain one (1) or more of the following certificates: CySA+ CE, GCIH, GSNA, GCIA, CISA, CISSP or Associate, CSSLP, CISSO, CFR, CASP+ CE, Cloud+ CE, GICSP, SCYBER, BCR Cyber Technical Range, CCNA Security, CCNA Cyber Ops.

Understanding of NIST SP 800-53 Rev5, FedRAMP, DoD Cloud SRG, CNSSI, and the NIST RMF.

Technical experience implementing security configuration, solutions, and/or cloud services.

Ability to validate cloud-native security implementations (E.g., IAM, logging, encryption, network segmentation, etc.).

Demonstrated ability to determine control effectiveness through documentation review, interviews, and technical testing.

Strong writing skills with the ability to translate technical information into clear assessment procedures and findings.

Strong verbal communication skills and ability to brief technical and non-technical audiences

Ability to obtain a DoD Secret clearance or higher.

Preferred Skills/Experience

Prior 3PAO or DoD assessor experience.

Experience with automation, IaC, or cloud-native security tooling.

AI Familiarity

Security clearance

#LI-Hybrid

Competitive salary based on experience and education

Salary Range: $80,000-$115,000

Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings-from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.

This posting will close within 90 days from the Posting Date.  

Medical, Dental & Vision Insurance Coverage

Life/ADD & Short/Long Term Disability Insurance

401(k) Savings Plan

Employee Stock Purchase Plan (ESPP)

Paid Time-Off (PTO)

Holidays

Education Reimbursement

Do you take information technology (IT) and information security seriously and want to make a difference? Helping leading-edge technology companies secure their cloud environments is at the core of what we do, and we make a difference. As a Security Consultant of Commercial Cybersecurity Services for Kratos, you will be supporting teams of professionals working to evaluate and secure innovative cloud computing solutions on the most advanced cloud and on-premises infrastructures, by providing security consulting services and performing security assessments. The ideal candidate will have a firm understanding of how to apply and assess the principles of information security in a variety of circumstances and translate security requirements into common technical implementations. Must have previous experience Federal Risk and Authorization Management Program (FedRAMP) and cloud computing. Experience working with the Department of Defense (DoD) Cloud Service Provider (CSP) Security Requirements Guide (SRG) is preferred. While not required, experience working with other frameworks and publications, such as National Institute of Standards and Technology (NIST) Publications, Cybersecurity Maturity Model Certification (CMMC), etc.) is desirable.

Security Consultants may serve in a variety of roles, with responsibilities to include but not limited to:

Support assessment teams conducting FedRAMP, DoD SRG, and NIST RMF security assessments.

Review security packages for legacy FedRAMP Rev5 assessments (SSP, SAP, SAR, POA&M, deviation requests, SCRs, ConMon artifacts) and SDRs for 20x assessments.

Validate Cloud Service Provider (CSP) compliance with FedRAMP/DoD/NIST security control baselines through review of evidence, testing, interviews, and analysis of scans.

Support security reporting through creation of detailed test procedures and findings using standardized language and templates.

Conduct client interviews to assess the operational and technical effectiveness of security controls.

Evaluate cloud security implementations across AWS, Azure, Google, or other IaaS environments.