190 applicants

Company

Kratos Defense and Security Solutions · 1 day ago

Security Consultant

United States

Full-time

Remote

Mid Level

Maximize your interview chances

ConsultingCyber Security

No H1B

Insider Connection @Kratos Defense and Security Solutions

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Support small project teams in the review and analysis of security packages for completeness and compliance with FedRAMP or other cybersecurity frameworks (e.g., DoD, NIST, CMMC, or similar) requirements.

Facilitate and participate in client interviews and working sessions to assess the technical and operational effectiveness of security control implementations within cloud environments.

Lead or assist in the development of Security Assessment Plans, Security Assessment Reports, and security briefings.

Collaborate effectively within dynamic teams and across multiple customer organizations with diverse personalities and expertise to drive to agreement on complex issues.

Effectively document successful and unsuccessful security control implementations that appropriately reflect testing methodologies and evidence used to determine security implementation effectiveness.

Consult on cloud security architecture and security control implementations that meet FedRAMP requirements.

Work with multiple stakeholders (internal and external) to identify security compliance gaps and propose technical and operational remediation solutions.

Develop security documentation that translates complex concepts and solutions into compliant documentation that is required for FedRAMP compliance.

Desire to eventually serve as a team lead or primary technical point of contact for customers during the execution of assessment and consulting engagements

FedRAMP Assessment experience

Third Party Assessment Organization (3PAO) experience

Strong desire to hone deep technical knowledge of cloud based architectures, infrastructures, microservices, container orchestration and other cloud-native technologies

Support multiple projects with the ability to adapt to various approaches

Expert ability to communicate technical and non-technical information in both written and verbal forms to internal and external individuals

Ability to adhere to projects/tasks, scheduling, quality control, and timely deliverable completion

Minimum of 32-hours of industry relevant security training

Willingness to obtain required customer clearance requirements

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cloud Security ArchitectureFedRAMP ComplianceCybersecurity FrameworksSecurity AssessmentsCloud InfrastructuresSecurity CertificationsTechnical DocumentationProject ManagementTechnical Operations ExperienceCompliance Gaps IdentificationMicroservicesContainer OrchestrationCloud-native TechnologiesClient EngagementIndustry Relevant Security Training

Required

Firm understanding of how to apply the principles of information security in a variety of circumstances

Expertise in translating security requirements into common technical implementations

Experience working across multiple compliance frameworks (FedRAMP, DOD SRG, CMMC, NIST, HITRUST, etc.)

Facilitate and participate in client interviews and working sessions to assess the technical and operational effectiveness of security control implementations within cloud environments

Lead or assist in the development of Security Assessment Plans, Security Assessment Reports, and security briefings

Collaborate effectively within dynamic teams and across multiple customer organizations with diverse personalities and expertise to drive to agreement on complex issues

Effectively document successful and unsuccessful security control implementations that appropriately reflect testing methodologies and evidence used to determine security implementation effectiveness

Consult on cloud security architecture and security control implementations that meet FedRAMP requirements

Work with multiple stakeholders (internal and external) to identify security compliance gaps and propose technical and operational remediation solutions

Develop security documentation that translates complex concepts and solutions into compliant documentation that is required for FedRAMP compliance

Desire to eventually serve as a team lead or primary technical point of contact for customers during the execution of assessment and consulting engagements

FedRAMP Assessment experience

Third Party Assessment Organization (3PAO) experience

Strong desire to hone deep technical knowledge of cloud based architectures, infrastructures, microservices, container orchestration and other cloud-native technologies

Support multiple projects with the ability to adapt to various approaches

Expert ability to communicate technical and non-technical information in both written and verbal forms to internal and external individuals

Ability to adhere to projects/tasks, scheduling, quality control, and timely deliverable completion

Minimum of 32-hours of industry relevant security training

Willingness to obtain required customer clearance requirements

Candidates must have one or more of the following industry certifications: Certified Information System Security Professional or Associate (CISSP or Associate), Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Auditor (CISA), Certified Information Systems Security Officer (CISSO), Cisco Certified Network Associate Security (CCNA Security), Cisco Certified Network Associate Cyber Security Operations (CCNA Cyber Ops), CompTIA Advanced Security Practitioner Continuing Education (CASP+), CompTIA Cloud+ (Cloud+), Cybersecurity Analyst (CySA+), CyberSec First Responder (CFR), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Systems and Network Auditor (GSNA), Global Industrial Cyber Security Professional (GICSP), Securing Cisco® Networks with Threat Detection Analysis (SCYBER)