Readiness Delivered. Kratos Defense & Security Solutions develops and fields transformative, affordable technology, platforms, and systems for United States National Security related customers, allies, and commercial enterprises. We proactively build trusted relationships with our peers, partners and customers, and take ownership for our actions—always striving to do the right thing.Kratos is looking for a Principal Security Consultant to join our team in a hybrid work environment. Do you take information technology (IT) and information security seriously and want to make a difference? Helping leading-edge technology companies secure their cloud environments is at the core of what we do, and we make a difference.
As a Principal Security Consultant of Commercial Cybersecurity Services for Kratos, you will be leading and supporting teams of professionals working to evaluate and secure innovative cloud computing solutions on the most advanced cloud and on-premises infrastructures, by providing security consulting services and performing security assessments. The ideal candidate will have a firm understanding of how to apply the principles of information security in a variety of circumstances and security requirements into common technical implementations. Must have extensive experience working with the Department of Defense (DoD) Cloud Service Provider (CSP) Security Requirements Guide (SRG), Federal Risk and Authorization Management Program (FedRAMP), and cloud computing. While not required, experience working with other frameworks and publications, such as National Institute of Standards and Technology (NIST) Publications, Cybersecurity Maturity Model Certification (CMMC), etc.) is highly desirable.
- Contribute to the growth of the FedRAMP consulting and assessment practices
- Serve as a functional leader in development and implementation of creative approaches, methodologies, and tools to meet client needs.
- Provide thought leadership to improve current service offerings.
- Provide technical expertise and remain current on technology trends in the marketplace.
- Maintain a strong network and promote the organization at various government meetings, industry meetings, forums, panels, and conferences.
- Cultivate and maintain key partnering relationships with the government, strategic customers, business associates, and/or sub-contractors.
- Provide Technical expertise to support business development, and sales to customer base.
- Identify new leads through networking with existing and potential customers.
- Develop and organize service offerings, client strategy, pricing, and profitability.
- Serve as a key contributor to capture and proposal efforts.
- Delivery Expertise
- Provide technical expertise and leadership when communicating with customers, and government stakeholders
- Independently lead delivery teams and provide thorough guidance to team members with minimal guidance from leadership.
- Manage multiple efforts by appropriately gauging individual level of effort needed on each project based on staff, customer requirements, and similar factors to ensure properly balanced projects.
- Ensure successful project completion by developing and planning projects/tasks in collaboration with project managers, and adhering to scheduling, budgetary, quality control, risk management, and contractual obligations.
- Support staffing skill development.
- Improve quality and compliance associated with customer deliverables and quality management system.
- Lead and support assessment teams conducting FedRAMP, DoD SRG, and NIST RMF security assessments.
- Review Security Packages (SSP, SAP, SAR, POA&M, Deviation Requests, Significant Change Requests, Continuous Monitoring artifacts) for completeness and compliance.
- Validate Cloud Service Provider (CSP) compliance with FedRAMP/DoD/NIST security control baselines through review of evidence, testing, interviews, and analysis of scans, etc.
- Develop Security Assessment Plans and Security Assessment Reports, including detailed test procedures and findings.
- Validate Cloud Service Provider compliance through evidence reviews, interviews, technical testing, and analysis of vulnerabilities.
- Conduct client interviews to assess the operational and technical effectiveness of security controls.
- Evaluate cloud security implementations across AWS, Azure, Google, or other IaaS environments.
Experience and Skills
- Minimum education level needed: Bachelor's degree in computer science or related field or relevant work experience.
- Minimum # of years of job-related experience needed: Seven (7) years of cybersecurity experience.
- Required certification(s): Maintain a CISSP and one or more of the following certificates: CASP+ CE, GCED, GCIH, GSLC, CISA, CISM, CCSP, CISSP-ISSAP, CISSP-ISSEP, CISSP-ISSMP, CFR, CCISO.
- Demonstrated understanding of the FedRAMP process.
- Ability to independently manage project teams and serves as a trusted consort for advice that provides specialized expertise to develop and implement technical solutions for complex client problems.
- Ability to successfully pass security framework certification requirements.
- Sufficient technical knowledge and understanding of cloud solutions, architecture, networks, protocols, cryptography, and identity and access management, at a minimum.
- Excellent interpersonal and communication skills, both written and verbal.
- Ability to translate technical materials and issues into non-technical/layman terms.
- Active DoD Top Secret clearance or higher.
- Experience working in classified environments; ability to work in or access a SCIF as required.
Preferred Skills/Experience
- Prior 3PAO or DoD assessor experience.
- Experience leading assessment teams or serving as a technical SME.
- Experience with automation, IaC, or cloud-native security tooling.
#LI-Hybrid
Competitive salary based on experience and education
Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings—from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.
This posting will close within 90 days from the Posting Date.
- Life/ADD & Short/Long Term Disability Insurance
- 401(k) Savings Plan
- Employee Stock Purchase Plan (ESPP)
- Paid Time-Off (PTO)
- Holidays
- Education Reimbursement
Kratos Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employmentwithout regard to race,color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy,genetic information, disability, status as aprotected veteran, or any other protected category under applicablefederal, state, and local laws.
Disability Accessibility Accommodation If you require an accommodation to navigate or apply toour careers site, please send your request to HRAccessibility@kratosdefense.com or call 858-964-2916. Any inquiresnot related to requesting an accommodation will be discarded.
Pay Transparency The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
Job Applicant Privacy Notice For applicants in the EU and California residents, please review ourprivacy notice .
(Persons of Mexican, Puerto Rican, Cuban, South or Central American, or other Spanish culture or origin, regardless of race)
- White/Caucasian (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East, and North Africa.
- Black/African American (Not Hispanic or Latino) - A person having origins in any of the black racial groups of Africa.
- Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam.
- Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands.
- Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above five races.
- I Decline
Voluntary Self-Identification of Disability
- Alcohol or other substance use disorder (not currently using drugs illegally)
- Blind or low vision
- Cancer (past or present)
- Cardiovascular or heart disease
- Celiac disease
- Cerebral palsy
- Deaf or hard of hearing
- Diabetes
- Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
- Epilepsy or other seizure disorder
- Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
- Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
- Missing limbs or partially missing limbs
- Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, legbrace(s) and/or other supports
- Nervous system condition, for example, migraine headaches, Parkinson's disease, multiple sclerosis (MS)
- Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
- Partial or complete paralysis (any cause)
- Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
- Yes, I Have A Disability, Or Have A History/Record Of Having A Disability
- No, I Don't Have A Disability, Or A History/Record Of Having A Disability
- I don't wish to answer
Veteran
This employer is a Government contractor subject to the Vietnam Era Veterans'Readjustment Assistance Act of 1974, as amended by the Jobs for Veterans Act of 2002,38 U.S.C. 4212 (VEVRAA), which requires Government contractors to take affirmative action to employ and advance in employment:
- Disabled veterans;
- Recently separated veterans;
- Active duty wartime or campaign badge veterans;
- Armed Forces service medal veterans.
These classifications are defined as follows:
- A "disabled veteran" is one of the following:
- A veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs;
- A person who was discharged or released from active duty because of a service-connected disability.
- A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
- An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
- An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
Protected veterans may have additional rights under USERRA - the Uniformed Services Employment and Reemployment Rights Act. In particular, if you were absent from employment in order to perform service in the uniformed service, you may be entitled to be reemployed by your employer in the position you would have obtained with reasonable certainty if not for the absence due to service. For more information, call the U.S. Department of Labor's Veterans Employment and Training Service (VETS), toll- free, at 1-866-4-USA-DOL.