Senior Security Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

Kratos Defense and Security Solutions · 12 hours ago

Senior Security Engineer

Kratos Defense and Security Solutions is a leader in assured aerospace communication solutions and services. They are seeking a Senior Security Engineer to support their Continuous Monitoring capabilities within the DevSecOps organization by conducting vulnerability analysis, collaborating with engineering teams, and ensuring the security posture of their systems.

ConsultingCyber SecurityGovernmentInformation TechnologyNational SecurityPublic SafetySatellite CommunicationSecurity
check
H1B Sponsor Likelynote

Responsibilities

Collaborate with engineering and high-profile customers to provide vulnerability scan analysis & validation, Plan of Actions & Milestones (POA&M) review, Risk Exposure Table (RET) analysis, and support in creation / validation of vulnerability deviation requests
Conduct detailed analysis on operating system, web application, database, virtualization, container, virtual-storage, and driver vulnerability scans
Reporting will capture gaps in the analysis, and fully compiled vulnerabilities to present the customers complete risk posture
Validate Vulnerability Scan Quality (Authentication, Signature Updates, Configuration, etc.)
Ability to validate scans against an inventory & ensure all hosts within a boundary are scanned. (Host Inventory Management)
Familiarity and ability to differentiate different asset types such as containers, operating systems, databases, web scans, etc
Familiarity and ability to differentiate different types of audit checks such as CIS Benchmark / SITG checks and vulnerability checks
Review & Verify Data Structures / Report Outputs from Vulnerability Scanners
Ability to understand and verify data structures such as XML, JSON, YAML, etc
Ability to identify required data fields for reports and utilize them accordingly
Ability to correlate potentially complex data structures and consolidate the data into a single format for analysis
Experience with configuration / compliance checks such as CIS Benchmarks and STIGs
Ability to identify & verify authenticated & non-authenticated scans and agent-based scans
Ability to validate that vulnerability tool signatures are updated to the latest version and maintain a consistent update schedule
Ability to validate the scope of the audit checks enabled by the scanner are properly executing on the applicable assets
Strong Communication with the customer & fellow team members
Actively communicate issues or concerns to the customer & team
Actively listens and participates in meetings
Strong Writing & Editing skills to assist in writing, developing, and editing ConMon processes & documentation
Ability to write, edit, review, and assemble documents utilizing Microsoft Office & Markdown formatting syntax
Ability to effectively write and clearly convey information
Familiarity with code layout and able to extract comments to document functionality
Familiarity with documentation styles that identify tasks that need to be accomplished & their required resources. Examples include: Plan of Action and Milestones (POA&M), Deviation Requests, Project Plans, Communication Plans
Ability to effectively accomplish complex tasks with minor guidance from team leadership
Ability to sequence and execute work efficiently with set timelines
Seek understanding and clarification of objectives within set tasks
Ability to demonstrate flexibility and resilience in response to changing or ambiguous work situations while maintaining a positive attitude and making them learning opportunities
Enthusiasm for conducting research on a variety of technical & non-technical topics

Qualification

Vulnerability ScanningRisk AnalysisMS ExcelPowerShellPythonGOVulnerability ManagementCIS BenchmarksData StructuresWriting & EditingResearch SkillsLinux AdministrationSQLCyber Security CertificationsGitContainerizationVirtualizationCommunicationInterpersonal Skills

Required

Expert knowledge MS Excel
Experience with PowerShell, GO, and/or Python
Experience with various vulnerability scanners and SBOM Generation tools such as SonarQube, Syft, Grype, NPM Audit, Artifactory xRay, Tenable, Qualys, Burp Suite, etc
Validate Vulnerability Scan Quality (Authentication, Signature Updates, Configuration, etc.)
Ability to validate scans against an inventory & ensure all hosts within a boundary are scanned. (Host Inventory Management)
Familiarity and ability to differentiate different asset types such as containers, operating systems, databases, web scans, etc
Familiarity and ability to differentiate different types of audit checks such as CIS Benchmark / SITG checks and vulnerability checks
Review & Verify Data Structures / Report Outputs from Vulnerability Scanners
Ability to understand and verify data structures such as XML, JSON, YAML, etc
Ability to identify required data fields for reports and utilize them accordingly
Ability to correlate potentially complex data structures and consolidate the data into a single format for analysis
Experience with configuration / compliance checks such as CIS Benchmarks and STIGs
Ability to identify & verify authenticated & non-authenticated scans and agent-based scans
Ability to validate that vulnerability tool signatures are updated to the latest version and maintain a consistent update schedule
Ability to validate the scope of the audit checks enabled by the scanner are properly executing on the applicable assets
Strong Communication with the customer & fellow team members
Actively communicate issues or concerns to the customer & team
Actively listens and participates in meetings
Strong Writing & Editing skills to assist in writing, developing, and editing ConMon processes & documentation
Ability to write, edit, review, and assemble documents utilizing Microsoft Office & Markdown formatting syntax
Ability to effectively write and clearly convey information
Familiarity with code layout and able to extract comments to document functionality
Familiarity with documentation styles that identify tasks that need to be accomplished & their required resources. Examples include: Plan of Action and Milestones (POA&M), Deviation Requests, Project Plans, Communication Plans
Ability to effectively accomplish complex tasks with minor guidance from team leadership
Ability to sequence and execute work efficiently with set timelines
Seek understanding and clarification of objectives within set tasks
Ability to demonstrate flexibility and resilience in response to changing or ambiguous work situations while maintaining a positive attitude and making them learning opportunities
Enthusiasm for conducting research on a variety of technical & non-technical topics
Research may be for personal improvement or to assist team members in dissecting problems

Preferred

Experience with using git collaboratively for configuration, file, and document version control
Basic Experience operating in virtualized environments (e.g., KVM, VMware, OpenStack)
Basic Experience operating in containerized environments (e.g., Docker, Kubernetes, OpenShift)
General Linux systems administration and SQL experience
FedRAMP experience
Cyber Security certifications (e.g., Sec+, CISSP, etc.)
Individuals currently working in or interested in Cyber Security, Vulnerability Data Management & Analytics, or long time experience in the tech field
Good interpersonal skills to interact with management, team members, and customers
Familiarity with coding languages such as PowerShell, Python and GO
Experience in use of, creation, and or maintenance of automation, scripts, code bases, etc
Familiarity with vulnerability scanners such as Nessus, Qualys, Burp Suite, AWS Inspector, etc

Benefits

Medical, Dental & Vision Insurance Coverage
Life/ADD & Short/Long Term Disability Insurance
401(k) Savings Plan
Employee Stock Purchase Plan (ESPP)
Paid Time-Off (PTO)
Holidays
Education Reimbursement

Company

Kratos Defense and Security Solutions

company-logo
Kratos Defense & Security Solutions provides mission critical engineering, IT services, and war fighter solutions.

H1B Sponsorship

Kratos Defense and Security Solutions has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2020 (1)

Funding

Current Stage
Public Company
Total Funding
$943.8M
Key Investors
United States Air Force
2025-06-25Post Ipo Equity· $556M
2025-04-17Grant· $30M
2024-02-22Post Ipo Equity· $288M

Leadership Team

leader-logo
Eric DeMarco
President and CEO
B
Ben Goodwin
SVP,Corporate Development & Government Affairs
linkedin
Company data provided by crunchbase