SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Xona Space Systems is seeking a Cloud Security Engineer to embed security into the Platform Engineering team. You will design, implement, and automate security guardrails across AWS infrastructure and deployment pipelines, focusing on building secure defaults and self-service security tools rather than acting as a compliance gatekeeper.
Key responsibilities include:
- Cloud Security Architecture & Hardening: Design and enforce secure cloud patterns, zero-trust network segmentation, and hardening standards across AWS multi-account architecture and container platforms like Kubernetes.
- Identity and Access Management (IAM): Architect secure authentication, authorization, secrets management, and zero-trust networking principles across all platform services.
- Automation & Guardrails: Build automated security guardrails that enable developers to move quickly while maintaining strict compliance standards (CMMC, NIST 800-171).
- Threat Management & Incident Response: Conduct security assessments and threat modeling. Partner with SRE and operations teams to monitor security telemetry, triage cloud threats, and participate in incident response.
Required qualifications:
- 4+ years of cloud security, DevOps, or platform engineering experience with emphasis on security operations and architecture
- Deep hands-on experience securing cloud environments (AWS, GCP, or Azure); AWS Certified Security, CISSP, or CCSK certifications are a plus
- Strong understanding of containerization security best practices and Kubernetes security controls (RBAC, network policies, runtime security)
- Proficiency in Python, Go, or similar languages with automation tool experience
- Familiarity with CI/CD security integrations, SBOM, SIEM, and CSPM tools
Preferred qualifications include Zero Trust architecture implementation experience, Policy-as-Code frameworks (Open Policy Agent), developer enablement focus, and hands-on offensive security or red-team exercise experience.
U.S. citizenship or lawful permanent residency required to comply with space technology export regulations.
