Cleared Principal Cyber Security Consultant

Ready for Whatis Next? At Kratos, we encourage an entrepreneurial spirit balanced with discipline. We work hard, and take care of our customers, employees, and families. Recognized as thought leaders in our industry, we are motivated by creating and delivering innovative solutions to our nation and global customers.

Do you want to work with the most amazing cloud service providers in the tech space? As a Security Consultant of Commercial Cybersecurity Services for Kratos, you will be supporting teams of professionals working to evaluate and secure innovative cloud computing solutions on the most advanced cloud and on-premises infrastructures, by providing security consulting services and performing security assessments. The ideal candidate will have a firm understanding of how to apply the principles of information security in a variety of circumstances and security requirements into common technical implementations. Candidates must have experience working in classified environments. Must have previously performed assessment work based on Federal Risk and Authorization Management Program (FedRAMP) assessments, Department of Defense (DoD) Cloud Service Provider (CSP) Security Requirements Guide, and/or National Institute of Standards and Technology (NIST) Special Publications and frameworks.

Key Responsibilities:

Assessor Role

• Support teams in the review and analysis of Security Packages for completeness and compliance with FedRAMP/DoD/NIST requirements.
• Assist in the development of Security Assessment Plans (SAP), Security Assessment Reports (SAR), and security briefings.
• Validate Cloud Service Provider (CSP) compliance with FedRAMP/DoD/NIST security control baselines through review of evidence, testing, interviews, and analysis of scans, etc.
• Familiarity with SSP, SAP, SAR, Plan of Action and Milestones (POA&M) Report, Deviation Requests, Significant Change Requests, Continuous Monitoring artifacts is required.
• Conduct client interviews to assess the technical and operational effectiveness of security control implementations.
• Assess existing security environments to validate that security implementations remain up to date throughout the life cycle of a system or environment.
• Review security documentation and document thorough description of assessment results as part of security testing for assessments.
• Understand and have the ability to direct engineers to demonstrate technical security implementations using common Infrastructure as a Service (IaaS) security services

• 10-15 years of experience supporting cybersecurity assessments
• Related industry certification (e.g., CompTIA, ISACA, ISC2)
• Adjudicated Top-Secret (TS) clearance with Sensitive Compartmented Information (SCI)
• Current, or ability to obtain AWS Certified Cloud Practitioner (CCP) prior to contract start

Preferred Skills and Experience

• In-depth knowledge of GCP, AWS and/or Azure IaaS capabilities and services
• Experience working with within eMASS and/or Xacta.
• Experience with DoD CSP SRG guidance, CNSSP 32 and CNSSI 1253
• FedRAMP Assessment Experience
• Active TS/SCI Counterintelligence (CI) Polygraph

#LI-Hybrid,i#LI-Onsite

Position is contingent upon successful contract award.

Competitive salary based on experience and education

Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offeringsifrom commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And, we always deliver.

This posting will close within 90 days from the Posting Date.