--- title: 'Senior Cybersecurity Engineer at Xona Space Systems' canonical: 'https://feeny.ai/job/senior-cybersecurity-engineer-xona-space-systems-burlingame-vsa2h5z321b3' type: 'job' last_seen: '2026-11-11' --- # Senior Cybersecurity Engineer at Xona Space Systems - **Company:** Xona Space Systems - **Location:** Burlingame, CA - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-11-11 - **Last confirmed live:** 2026-11-11 - **Apply:** https://jobs.ashbyhq.com/xona-space/82cfde0d-1834-4e94-b3d6-5a3cb775cfdd ## Job description Xona is the navigational intelligence company bringing real-time, centimeter-level certainty to any device, anywhere on Earth. With Pulsar – the world’s most advanced PNT satellite infrastructure in Low Earth Orbit – Xona will offer a future-proof, backwards-compatible global positioning system optimized for absolute precision, superior power, and robust protection. Xona Space is seeking a Senior Cybersecurity Engineer to lead the development and implementation of our cybersecurity and compliance programs. This role will play a key part in strengthening our security infrastructure and preparing the company for CMMC certification. Working across IT, engineering, operations, and company leadership, you will take a hands-on approach to assessing security risks, implementing technical solutions, and establishing scalable security practices. The ideal candidate brings strong technical expertise, experience in regulated environments, and the ability to balance security requirements with the needs of a growing organization. ## What You'll Be Doing - Lead cybersecurity strategy and implementation. Assess our security posture, identify risks and gaps, establish priorities, and develop a roadmap for strengthening security across corporate IT, engineering, and cloud environments. - Drive CMMC Level 2 readiness. Lead implementation of NIST SP 800-171 security requirements, define assessment scope, maintain compliance documentation, coordinate assessments, and prepare the organization for certification. - Strengthen technical security infrastructure. Design, implement, and maintain security controls across identity and access management, endpoint protection, network security, cloud environments, vulnerability management, and Microsoft GCC High. - Manage security operations and risk. Establish security monitoring, incident response, vulnerability remediation, and ongoing compliance processes. Evaluate third-party providers and technologies to ensure appropriate protection of sensitive and regulated information. - Partner across the organization. Work with engineering, IT, operations, legal, and company leadership to integrate security into business and technical decisions, support government compliance obligations, and communicate risks and recommendations. ## Requirements - 7+ years of relevant cybersecurity experience, preferably in regulated or government-contracting environments. - Demonstrated experience implementing NIST SP 800-171 controls and preparing organizations for CMMC Level 2 certification. - Hands-on experience administering Microsoft GCC High or Azure Government environments, including Entra ID, Intune, Defender, and Purview. - Strong technical expertise across identity security, endpoint protection, network and cloud security, vulnerability management, and incident response. - Working knowledge of CUI safeguarding, DFARS requirements, and ITAR/EAR data protection. - Ability to independently assess security environments, prioritize initiatives, and drive implementation. - Strong communication and documentation skills, including experience working with assessors, technical teams, and leadership. - Relevant technical degree or equivalent professional experience. Required Certifications and Clearance - CMMC Certified Professional (CCP) minimum; CMMC Certified Assessor (CCA) preferred. - CISSP or equivalent senior security certification. - Active Secret Clearance. ## Preferred Qualifications - Aerospace, defense, or space industry experience. - Experience supporting a completed CMMC Level 2 certification. - CGRC, Microsoft security certifications (SC-100, SC-300, SC-200), or relevant GIAC certifications. - Experience with security automation using PowerShell, Python, or Bash. - Experience with FAR/DFARS, NISPOM, DCSA reviews, or Facility Security Officer (FSO) responsibilities. - Facility Clearance (FCL) experience. For U.S. Roles: To comply with U.S. Government space technology export regulations, applicant must be a U.S. citizen, lawful permanent resident of the United States (i.e. Green Card holder), or other protected individual as defined by 8 U.S.C. 1324b(a)(3). For U.K. Roles: To comply with U.K. regulations, this role requires Baseline Personnel Security Standard (BPSS) checks, and successful candidates must be eligible to obtain UK Security Clearance (SC). For Canada Roles: Successful candidates must obtain and hold a security clearance at the reliability status level, and pass security assessment for the Canadian Controlled Goods Program (CGP) and ITAR. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. ## About Xona Space Systems ## Company Overview - **One-liner**: Xona Space Systems is building Pulsar, a high-integrity positioning, navigation, and timing (PNT) constellation in Low Earth Orbit that delivers authenticated, centimeter-accurate services as a resilient alternative to GPS. - **Entity Type**: Private (Series C – $170M raised ~April 2026) - **Headquarters**: Burlingame, California, USA (also offices in Montreal, Canada and London, England) - **Founded**: 2019 - **Founders**: Brian Manning (CEO), Tyler Reid (CTO), Adrien Perkins (VP of Engineering) ## Core Business - **Primary industries**: Aerospace / Satellite Navigation, Defense & Critical Infrastructure, Autonomous Systems - **Target customers**: B2B / B2G – enterprise, government, defense, autonomous robotics, construction, industrial IoT, and any application requiring resilient PNT - **Mission**: “Unlock the potential of tomorrow’s technologies by providing the most robust and accurate navigation and timing services on Earth.” ## Products & Services - **Pulsar Constellation**: A network of 258 small, software-defined satellites in LEO broadcasting secured, authenticated PNT signals. Offers native user accuracy at centimeter level and is designed to upgrade existing GPS devices via a software update. - **Pulsar‑Verified Receivers & Simulators**: Certified hardware and test platforms for integrators. Includes reference designs and simulation tools. - **Time Authentication Service**: A cryptographic layer that validates the origin and integrity of timing signals, providing resilience against spoofing and jamming. ## Market Standing - **Valuation / Market Cap**: Not publicly disclosed (conflicting reports may exist; no official figure available) - **Key Metric**: Total funding $327.53M (CB Insights); latest Series C closed ~April 2026 (amount $170M) - **Notable Investors / Partners**: Not publicly disclosed (funding specifics unknown). Key partners include Murata (MOU for LEO navigation in industrial applications), the Government of Canada (R&D collaboration to strengthen timing resilience), and the National Research Council of Canada. - **Growth Signals**: - Successfully launched Pulsar‑0, the first commercially funded navigation satellite, now in orbit for one year (June 2026). - 11+ patents filed (encrypted navigation signals, wireless locating, etc.). - Active hiring in Burlingame, Montreal, and London; 828 employees on LinkedIn as of mid‑2026. - Collaboration with ISED, NRC, and DRDC to broadcast Canada’s official time signal (UTC(NRC)) from space. ## Competitive Advantages - **First‑mover with a privately funded navigation satellite** – Pulsar‑0 set a precedent for commercial LEO PNT. - **Authenticated signals** – Cryptographic security native to the signal provides spoofing/jamming resistance unmatched by traditional GPS. - **Software‑defined satellites** – Rapid constellation scaling and in‑orbit updates at a fraction of legacy system cost. - **Multi‑national timing broadcast** – Ability to carry multiple official time standards (US, UK, Canada) on a shared infrastructure, creating sovereign resilience for allies. ## Strategic Focus - **Constellation deployment** – Scale from prototype (Pulsar‑0) to a full production fleet of 258 satellites. - **Ecosystem enablement** – Grow partner network of receiver makers, chipset vendors, and integrators (e.g., Murata, government bodies). - **Geographic expansion** – Establish a strong presence in Canada (Montreal) and the UK (London) while deepening relationships with allied governments. - **Defense & critical infrastructure** – Pursue contracts that require autonomous, tamper‑proof PNT for military, aviation, and grid timing. ## Why Work Here - **Impact** – Work on “a generational technology at startup speed”; decisions are pushed to the people closest to the work. Culture of ownership and rapid iteration. - **Compensation** – Competitive salary, equity (ownership culture), 401(k) / Roth 401(k). - **Benefits** – 95% of healthcare premiums covered for US employees (50% for dependents); HSA/FSA options; supportive parental leave (equitable); flexible time off. - **Workplace** – Burlingame office with catered lunches twice a week, snacks, drinks, coffee. Roles also in Montreal and London (hybrid likely per location, but remote‑first not stated). - **Culture** – Engineering‑driven, fast‑shipping, collaborative; team includes leaders from industry and academia. ## Sources 1. [xonaspace.com](https://www.xonaspace.com/) 2. [xonaspace.com/careers](https://www.xonaspace.com/careers) 3. [xonaspace.com/mission](https://www.xonaspace.com/mission) 4. [cbinsights.com](https://www.cbinsights.com/company/xonaspace) 5. [linkedin.com](https://www.linkedin.com/company/xona-space-systems) ## Other roles at Xona Space Systems - [GNC Software Engineer](https://feeny.ai/job/gnc-software-engineer-xona-space-systems-burlingame-mm7trje3c55r) — Burlingame, CA - [Test Infrastructure/Integration Engineer](https://feeny.ai/job/test-infrastructure-integration-engineer-xona-space-systems-burlingame-5avr2tes0x5g) — Burlingame, CA - [Flight Director](https://feeny.ai/job/flight-director-xona-space-systems-burlingame-hyx96pp4j4de) — Burlingame, CA - [Développeur(-euse) principal(e) de produits, Fullstack / Senior Product Developer](https://feeny.ai/job/developpeur-euse-principal-e-de-produits-fullstack-senior-product-developer-5ms7v4x25mjs) — Montréal, Canada - [Senior Cloud Architect – Platforms Engineering](https://feeny.ai/job/senior-cloud-architect-platforms-engineering-xona-space-systems-burlingame-582tm3wbrgvm) — Burlingame, CA - [Technical Recruiter](https://feeny.ai/job/technical-recruiter-xona-space-systems-montreal-gad04nx4ktzw) — Montréal, Canada - [Senior Mechanical Engineer](https://feeny.ai/job/senior-mechanical-engineer-xona-space-systems-burlingame-9ev6s1stx287) — Burlingame, CA - [Mechanical Engineer](https://feeny.ai/job/mechanical-engineer-xona-space-systems-burlingame-qxva2nk9gzgq) — Burlingame, CA - [Supply Chain Manager](https://feeny.ai/job/supply-chain-manager-xona-space-systems-montreal-32kfvx011bew) — Montréal, Canada - [UE Verification Specialist (Canada)](https://feeny.ai/job/ue-verification-specialist-canada-xona-space-systems-montreal-mretdw5r4fwm) — Montréal, Canada