Senior Cybersecurity Engineer

Xona Space Systems • Burlingame, CA

2d • $180,000 - $210,000

About The Position

Xona Space is seeking a Senior Cybersecurity Engineer to lead the development and implementation of its cybersecurity and compliance programs. The role will strengthen the company’s security infrastructure and prepare it for CMMC certification. Working across IT, engineering, operations, and company leadership, the engineer will assess security risks, implement technical solutions, and establish scalable security practices while balancing security requirements with the needs of a growing organization.

Requirements

• 7+ years of relevant cybersecurity experience, preferably in regulated or government-contracting environments.
• Demonstrated experience implementing NIST SP 800-171 controls and preparing organizations for CMMC Level 2 certification.
• Hands-on experience administering Microsoft GCC High or Azure Government environments, including Entra ID, Intune, Defender, and Purview.
• Strong technical expertise across identity security, endpoint protection, network and cloud security, vulnerability management, and incident response.
• Working knowledge of CUI safeguarding, DFARS requirements, and ITAR/EAR data protection.
• Ability to independently assess security environments, prioritize initiatives, and drive implementation.
• Strong communication and documentation skills, including experience working with assessors, technical teams, and leadership.
• Relevant technical degree or equivalent professional experience.
• CMMC Certified Professional (CCP) certification at minimum.
• CISSP or equivalent senior security certification.
• Active Secret Clearance.
• For U.S. roles, applicant must be a U.S. citizen, lawful permanent resident of the United States, or other protected individual as defined by 8 U.S.C. 1324b(a)(3).
• For U.K. roles, the position requires Baseline Personnel Security Standard (BPSS) checks, and successful candidates must be eligible to obtain UK Security Clearance (SC).
• For Canada roles, successful candidates must obtain and hold a security clearance at the reliability status level and pass security assessment for the Canadian Controlled Goods Program (CGP) and ITAR.

Nice To Haves

• CMMC Certified Assessor (CCA) certification.
• Aerospace, defense, or space industry experience.
• Experience supporting a completed CMMC Level 2 certification.
• CGRC, Microsoft security certifications (SC-100, SC-300, SC-200), or relevant GIAC certifications.
• Experience with security automation using PowerShell, Python, or Bash.
• Experience with FAR/DFARS, NISPOM, DCSA reviews, or Facility Security Officer (FSO) responsibilities.
• Facility Clearance (FCL) experience.

Responsibilities

• Lead cybersecurity strategy and implementation by assessing security posture, identifying risks and gaps, setting priorities, and developing a security roadmap across corporate IT, engineering, and cloud environments.
• Drive CMMC Level 2 readiness by implementing NIST SP 800-171 requirements, defining assessment scope, maintaining compliance documentation, coordinating assessments, and preparing the organization for certification.
• Design, implement, and maintain security controls across identity and access management, endpoint protection, network security, cloud environments, vulnerability management, and Microsoft GCC High.
• Establish security monitoring, incident response, vulnerability remediation, and ongoing compliance processes.
• Evaluate third-party providers and technologies to ensure appropriate protection of sensitive and regulated information.
• Partner with engineering, IT, operations, legal, and company leadership to integrate security into business and technical decisions, support government compliance obligations, and communicate risks and recommendations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed