ZipRecruiter

Log In

1

Associate Security Consultant Jobs in Virginia (NOW HIRING)

Kratos Defense

Skillbridge FedRAMP Fellow

Herndon, VA · On-site

... consulting services and performing security assessments. The ideal candidate will have an ... Cisco Certified Network Associate Cyber Security Operations (CCNA Cyber Ops) * Cybersecurity ...

Kratos Defense

Skillbridge FedRAMP Fellow

Herndon, VA · On-site

... consulting services and performing security assessments. The ideal candidate will have an ... Cisco Certified Network Associate Cyber Security Operations (CCNA Cyber Ops) * Cybersecurity ...

Fortreum

Assessment Consultant

Leesburg, VA · On-site +1

$124K - $137K/yr

One or more of the following certifications: o Cisco Certified Network Associate Security (CCNA Security) o Cisco Certified Network Associate Cyber Security Operations (CCNA Cyber Ops) o ...

MyEyeDr.

Cloud Security Engineer

Vienna, VA · On-site

$110K - $124K/yr

Attend regular technical project and implementation meetings and serve as the security consultant ... Participate in our Vision coverage and associate discounts on our products * Participate in our ...

next page

Showing results 1-20

All JobsAssociate Security Consultant JobsAssociate Security Consultant Jobs in Virginia

Associate Security Consultant information

See Virginia salary details

$21.3K

$80.1K

$160.6K

How much do associate security consultant jobs pay per year?

As of Sep 1, 2026, the average yearly pay for associate security consultant in Virginia is $80,134.00, according to ZipRecruiter salary data. Most workers in this role earn between $49,600.00 and $104,600.00 per year, depending on experience, location, and employer.

What does an associate security consultant do?

An Associate Security Consultant assists organizations in identifying and mitigating security risks to their digital and physical assets. They typically support senior consultants by conducting vulnerability assessments, performing security audits, and helping to develop security policies and procedures. Their work also includes analyzing threats, preparing reports, and educating clients on best security practices. This entry-level role offers hands-on experience in information security and is a stepping stone to more advanced consulting positions.

What types of projects and clients can an associate security consultant expect to work with in their first year?

As an Associate Security Consultant, you’ll typically engage with a broad range of clients, including small businesses, large enterprises, and sometimes public sector organizations. Early projects often involve assisting with risk assessments, vulnerability testing, and supporting senior consultants with security audits. You’ll gain hands-on experience with various security tools and frameworks, while developing an understanding of different industry compliance standards. Collaboration is key; you’ll routinely work alongside IT teams, project managers, and other consultants to deliver actionable security recommendations.

What are the key skills and qualifications needed to thrive as an associate security consultant, and why are they important?

To thrive as an Associate Security Consultant, you need a solid understanding of cybersecurity principles, risk assessment, and often a bachelor's degree in a related field such as information security or computer science. Familiarity with tools like vulnerability scanners, SIEM platforms, and industry certifications such as CompTIA Security+ or CISSP are commonly required. Strong analytical thinking, effective communication, and attention to detail are crucial soft skills for this role. These skills and qualifications are important to effectively identify and mitigate security threats while clearly communicating risks and solutions to clients.

What is the difference between Associate Security Consultant vs Security Analyst?

AspectAssociate Security ConsultantSecurity Analyst
CertificationsCompTIA Security+, CISSP (entry-level), CEH (preferred)CompTIA Security+, GIAC Security Essentials, CISSP (entry-level)
Work EnvironmentClient-facing, consulting projects, security assessmentsMonitoring, incident response, vulnerability analysis
Employer & Industry UsageConsulting firms, cybersecurity service providersIT departments, security operations centers (SOCs)

The Associate Security Consultant typically works on client-facing security assessments and consulting projects, focusing on advising organizations on security best practices. In contrast, a Security Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities within an organization. Both roles require similar certifications and often overlap in entry-level cybersecurity skills, but their daily tasks and work environments differ significantly.

How much do associate security consultants get paid?

Associate security consultants typically earn between $50,000 and $70,000 annually, depending on experience, location, and certifications such as CompTIA Security+ or CISSP. Entry-level roles may start lower, while those with specialized skills or in high-demand areas can earn more.

Is SOC an entry level job?

A Security Operations Center (SOC) analyst role is typically not entry-level and often requires some experience in cybersecurity, network monitoring, or related fields. Entry-level positions may be labeled as SOC analyst I or junior analyst, but higher-level SOC roles usually demand certifications like CompTIA Security+ or CISSP and prior experience. Skills in intrusion detection, incident response, and security tools are also important for advancement.

What are the most commonly searched types of Security Consultant jobs in Virginia?

The most popular types of Security Consultant jobs in Virginia are:

What are popular job titles related to Associate Security Consultant jobs in Virginia?

For Associate Security Consultant jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Associate Security Consultant jobs in Virginia look for?

The top searched job categories for Associate Security Consultant jobs in Virginia are:

What cities in Virginia are hiring for Associate Security Consultant jobs?

Cities in Virginia with the most Associate Security Consultant job openings:

Associate Security Consultant jobs near you
Infographic showing various Associate Security Consultant job openings in Virginia as of August 2026, with employment types broken down into 86% Full Time, 11% Part Time, and 3% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $80,134 per year, or $38.5 per hour.

Principal Security Consultant

Kratos Defense

Herndon, VA • Hybrid

Full-time

Re-posted yesterday

Kratos Defense & Security Solutions rating

7.8

Company rating: 7.8 out of 10

Based on 10 frontline employees who took The Breakroom Quiz

Job description

Readiness Delivered. Kratos Defense & Security Solutions develops and fields transformative, affordable technology, platforms, and systems for United States National Security related customers, allies, and commercial enterprises.  We proactively build trusted relationships with our peers, partners and customers, and take ownership for our actions—always striving to do the right thing. Kratos is looking for a Principal Security Consultant to join our team in a hybrid work environment. Do you take information technology (IT) and information security seriously and want to make a difference? Helping leading-edge technology companies secure their cloud environments is at the core of what we do, and we make a difference. 

As a Principal Security Consultant of Commercial Cybersecurity Services for Kratos, you will be leading and supporting teams of professionals working to evaluate and secure innovative cloud computing solutions on the most advanced cloud and on-premises infrastructures, by providing security consulting services and performing security assessments. The ideal candidate will have a firm understanding of how to apply the principles of information security in a variety of circumstances and security requirements into common technical implementations. Must have extensive experience working with the Department of Defense (DoD) Cloud Service Provider (CSP) Security Requirements Guide (SRG), Federal Risk and Authorization Management Program (FedRAMP), and cloud computing. While not required, experience working with other frameworks and publications, such as National Institute of Standards and Technology (NIST) Publications, Cybersecurity Maturity Model Certification (CMMC), etc.) is highly desirable.

  • Contribute to the growth of the FedRAMP consulting and assessment practices
    • Serve as a functional leader in development and implementation of creative approaches, methodologies, and tools to meet client needs.
    • Provide thought leadership to improve current service offerings.
    • Provide technical expertise and remain current on technology trends in the marketplace.
    • Maintain a strong network and promote the organization at various government meetings, industry meetings, forums, panels, and conferences.
    • Cultivate and maintain key partnering relationships with the government, strategic customers, business associates, and/or sub-contractors.
    • Provide Technical expertise to support business development, and sales to customer base.
    • Identify new leads through networking with existing and potential customers.
    • Develop and organize service offerings, client strategy, pricing, and profitability.
    • Serve as a key contributor to capture and proposal efforts.
  • Delivery Expertise
    • Provide technical expertise and leadership when communicating with customers, and government stakeholders
    • Independently lead delivery teams and provide thorough guidance to team members with minimal guidance from leadership.
    • Manage multiple efforts by appropriately gauging individual level of effort needed on each project based on staff, customer requirements, and similar factors to ensure properly balanced projects.
    • Ensure successful project completion by developing and planning projects/tasks in collaboration with project managers, and adhering to scheduling, budgetary, quality control, risk management, and contractual obligations.
    • Support staffing skill development.
    • Improve quality and compliance associated with customer deliverables and quality management system.
    • Lead and support assessment teams conducting FedRAMP, DoD SRG, and NIST RMF security assessments.
    • Review Security Packages (SSP, SAP, SAR, POA&M, Deviation Requests, Significant Change Requests, Continuous Monitoring artifacts) for completeness and compliance.
    • Validate Cloud Service Provider (CSP) compliance with FedRAMP/DoD/NIST security control baselines through review of evidence, testing, interviews, and analysis of scans, etc.
    • Develop Security Assessment Plans and Security Assessment Reports, including detailed test procedures and findings.
    • Validate Cloud Service Provider compliance through evidence reviews, interviews, technical testing, and analysis of vulnerabilities.
    • Conduct client interviews to assess the operational and technical effectiveness of security controls.
    • Evaluate cloud security implementations across AWS, Azure, Google, or other IaaS environments.

  • Minimum education level needed: Bachelor's degree in computer science or related field or relevant work experience.
  • Minimum # of years of job-related experience needed: Seven (7) years of cybersecurity experience.
  • Required certification(s): Maintain a CISSP and one or more of the following certificates: CASP+ CE, GCED, GCIH, GSLC, CISA, CISM, CCSP, CISSP-ISSAP, CISSP-ISSEP, CISSP-ISSMP, CFR, CCISO.
  • Demonstrated understanding of the FedRAMP process.
  • Ability to independently manage project teams and serves as a trusted consort for advice that provides specialized expertise to develop and implement technical solutions for complex client problems.
  • Ability to successfully pass security framework certification requirements.
  • Sufficient technical knowledge and understanding of cloud solutions, architecture, networks, protocols, cryptography, and identity and access management, at a minimum.
  • Excellent interpersonal and communication skills, both written and verbal.
  • Ability to translate technical materials and issues into non-technical/layman terms.
  • Active DoD Top Secret clearance or higher.
  • Experience working in classified environments; ability to work in or access a SCIF as required.

Preferred Skills/Experience

  • Prior 3PAO or DoD assessor experience.
  • Experience leading assessment teams or serving as a technical SME.
  • Experience with automation, IaC, or cloud-native security tooling.
  • AI Familiarity

#LI-Hybrid

Competitive salary based on experience and education

Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings—from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.

This posting will close within 90 days from the Posting Date.   

What Kratos Defense & Security Solutions employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply