Senior Cybersecurity Consultant

$140,000 - $150,000/Yr

Kratos Defense & Security Solutions - Saint Louis, MO

Full-time - Mid Level

Remote - Saint Louis, MO

Transportation Equipment Manufacturing

About the position

As a Senior Cybersecurity Consultant at Kratos, you will play a crucial role in supporting teams to evaluate and secure innovative cloud computing solutions. This position involves providing security consulting services and performing security assessments, particularly focusing on compliance with the Federal Risk and Authorization Management Program (FedRAMP). The ideal candidate will have a strong understanding of information security principles and experience with various security frameworks.

Responsibilities

• Support teams in the review and analysis of Security Packages for completeness and compliance with FedRAMP requirements.
• Assist in the development of Security Assessment Plans (SAP), Security Assessment Reports (SAR), and security briefings.
• Validate Cloud Service Provider (CSP) compliance with FedRAMP security control baselines through review of evidence, testing, interviews, and analysis of scans.
• Conduct client interviews to assess the technical and operational effectiveness of security control implementations.
• Assess existing security environments to validate that security implementations remain up to date throughout the life cycle of a system or environment.
• Review security documentation and document ATPs as part of security testing for assessments.
• Document security control implementations via Assessment Test Procedures (ATP) that appropriately reflect testing methodologies and evidence used to determine security implementation effectiveness.

Requirements

• Minimum five (5) years of cybersecurity experience.
• Required certification(s): Certified Information System Security Professional (CISSP), and at least one other industry certification from a specified list.
• Working knowledge of the FedRAMP process.
• Ability and willingness to learn and support other security compliance frameworks (e.g., CMMC, HITRUST).
• Sufficient technical knowledge and understanding of cloud solutions, architecture, networks, protocols, cryptography, and identity and access management.
• Excellent interpersonal and communication skills, both written and verbal.
• Ability to translate technical materials and issues into non-technical/layman terms.

Nice-to-haves

• Experience working with other frameworks and publications such as DoD Cloud Computing Security Requirements Guide, NIST Publications, Cybersecurity Maturity Model Certification (CMMC), PCI.

Benefits

• Medical, Dental & Vision Insurance Coverage
• Life/ADD & Short/Long Term Disability Insurance
• 401(k) Savings Plan
• Employee Stock Purchase Plan (ESPP)
• Paid Time-Off (PTO)
• Holidays
• Education Reimbursement