Platform Cloud Security Engineer

Xona Space Systems; Burlingame (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

Xona Space Systems is seeking a Cloud Security Engineer to embed security into our Platform Engineering team. You will design, implement, and automate security guardrails across AWS and deployment pipelines, enabling engineering to move fast without compromising safety.

Collaborate with architecture, DevOps, and security, delivering secure foundational services, automating compliance, and maintaining high security standards across the engineering org.

Qualifications

• 4+ years of cloud security, DevOps, or platform engineering with focus on security operations and architecture.
• Hands-on experience securing cloud environments (AWS, GCP, or Azure) and zero-trust concepts.
• Strong container security practices and Kubernetes controls (RBAC, network policies, runtime security).
• Proficiency in Python, Go or similar for automation; familiarity with security tooling and policy enforcement.

Responsibilities

• Design and enforce secure cloud patterns, zero-trust segmentation, and hardening across AWS multi-account architecture and containers.
• Architect secure authentication, authorization, secrets management, and zero-trust networking across platform services.
• Build automated security guardrails to empower developers while maintaining compliance (CMMC, NIST 800-171).
• Partner with SRE and operations to monitor security telemetry, triage cloud threats, and support incident response.

Skills

Cloud security

Security architecture

IAM & zero-trust

SRE collaboration

SBOM/CI-CD security

Tools

Kubernetes

CI/CD security tooling

SBOM tooling

SIEM

CSPM

Job description

Xona Space Systems is seeking a Cloud Security Engineer to embed security into our Platform Engineering team. You will design, implement, and automate security guardrails across AWS and deployment pipelines, enabling engineering to move fast without compromising safety.

Collaborate with architecture, DevOps, and security, delivering secure foundational services, automating compliance, and maintaining high security standards across the engineering org.