Lead Security Consultant

Job Description

Readiness Delivered. Kratos engineers and deploys technology and systems that move national security forward, with the cost, speed, and reliability that make readiness certain. We are a trusted partner-driven by doing the right thing and achieving maximum success for our customers, our partners and ourselves. Do you want to be on the front lines of securing the nation's defense supply chain from cyber crime, theft, espionage and other threats? Helping small to large leading-edge organizations in the defense industrial base (DIB) secure their environments is at the core of what we do.

As a Lead Security Consultant for Kratos' Commercial Cybersecurity Services division, you will direct and support teams of professionals working to evaluate and secure a wide-range of environments within some of the most advanced, leading-edge organizations in the world.

The ideal candidate will have a deep understanding of how to apply the principles of information security in a variety of circumstances and expertise translating security requirements into common technical implementations. Experience working across multiple compliance frameworks (CMMC, FedRAMP, DoD SRG, NIST, PCI, ISO, HIPAA, SOC, CJIS, etc.) is highly desirable. As a Lead, you are expected to guide teammates, drive solutioning discussions, and ensure deliverable excellence across engagements.

Responsibilities

General

• Maintain expert-level knowledge of the CMMC framework, including practice requirements, assessment methodology, and authoritative interpretation of technical and non?technical controls.
• Regularly obtain continuing education necessary to maintain certifications and meet qualification requirements.
• Proactively maintain up?to?date knowledge of industry trends, threat activity, and evolving security technologies to enhance skills and abilities.
• Independently and proactively communicate progress on tasks, deliverables, and schedule impacts to clients and internal leadership.
• Apply rigorous quality control practices to all work products in advance of quality assurance review, ensuring deliverables meet Kratos quality and QMS standards.
• Take ownership of opportunities to improve current service offerings and contribute to continuous improvement of assessment processes, documentation, and methodologies.
• Mentor peers and junior team members by sharing assessment techniques, evidence evaluation strategies, and control interpretation guidance.

Assessor

• Lead assessments and project tasks as a Lead CCA or RP, ensuring teams stay aligned with project scope, schedule, and quality expectations.
• Provide critical input and leadership in the development of assessment artifacts, including Assessment Plans, Daily Checkpoint Logs, Risk Traceability Matrices, and Security Assessment Reports and briefings.
• Conduct client interviews across all security requirements with no preparation needed, while supporting other team members during their interviews. Resolve control interpretation issues in real time for clients and teammates.
• Collaborate effectively within dynamic teams and across multiple customer organizations with diverse personalities and expertise to drive agreement on complex issues.
• Document successful and unsuccessful security practice implementations accurately, clearly articulating test methods, evidence sources, and interpretations aligned with CMMC methodology.
• Cross?walk multiple sources of evidence (artifacts, demonstrations, interviews, tests) to assess maturity and sufficiency of practice implementation throughout an organization.
• Own documentation quality, producing client?ready materials and providing constructive peer reviews to strengthen overall team output.

Advisor

• Conduct diagnostic and discovery sessions to gain an enterprise-level understanding of security architecture, inheritance, boundaries, and practice implementations.
• Leverage deep understanding of security controls and technical architectures to identify gaps, develop supporting documentation, and propose both technical and operational remediation solutions.
• Work with internal and external stakeholders to assess security compliance gaps and guide organizations toward solutions that align with CMMC, NIST SP 800?171, and relevant regulatory requirements.
• Provide consultative reviews of security documentation, offering authoritative remediation or enhancement recommendations.
• Lead collaborative discussions within dynamic teams and across multiple customer organizations to drive agreement on complex issues.
• Research customer questions and deliver clear, accurate, authoritative guidance, ensuring alignment with CMMC interpretive expectations and Kratos QMS requirements.

Experience and Skills

• Cybersecurity Experience: 6 or more years of hands-on work in a cybersecurity role (e.g., CISO, Red Team member, SOC analyst).
• Management Experience: 6 or more years of experience in a management or leadership role.
• Assessment/Audit Experience: 3 or more years participating on teams conducting internal or external compliance audits.
• CMMC Lead Certified Assessor (LCCA)
• Tier 3 suitability (or Secret clearance or higher)
• Ability and willingness to learn and support other security compliance frameworks.
• Ability to successfully pass security framework certification requirements.
• Broad based IT background with a technical understanding of networks, protocols, security configuration, cryptography and identity and access management.
• Excellent communication skills, both written and verbal, including an ability to translate technical concepts and issues into non-technical or layman's terms.
• Ability to successfully deliver on multiple, simultaneous tasks.
• An active, Secret clearance is required

Preferred Skills and Experience

• Local to the Washington DC metro area
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Officer (CISSO)
• Certified Penetration Testing Engineer (CPTE)
• Cybersecurity Analyst+ (CySA+)
• Federal IT Security Professional-Auditor (FITSP-A)
• GIAC Cloud Security Automation (GCSA)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• CISSP - Information Systems Security Engineering Professional (CISSP-ISSEP)
• GIAC Security Leadership Certification (GSLC)
• GIAC Systems and Network Auditor (GSNA)

#LI-Remote

The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge, and skills.

Competitive salary based on experience and education
Salary Range: $130,000-$170,000

Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings-from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.

This posting will close within 90 days from the Posting Date.

Job Benefits

• Medical, Dental & Vision Insurance Coverage
• Life/ADD & Short/Long Term Disability Insurance
• 401(k) Savings Plan
• Employee Stock Purchase Plan (ESPP)
• Paid Time-Off (PTO)
• Holidays
• Education Reimbursement