Cloud Security Specialist – Platforms Engineering

The role

You will design, implement, and automate security guardrails across AWS cloud infrastructure and deployment pipelines. You will work within the Platforms Engineering team to build secure foundational services and automate compliance guardrails.

What you will do

• Design and enforce secure cloud patterns and hardening standards across AWS and container platforms.
• Architect secure authentication, authorization, secrets management, and zero-trust networking.
• Build automated security guardrails to minimize friction while maintaining compliance standards.
• Conduct security assessments, penetration testing, threat modeling, and container vulnerability scanning.
• Coordinate remediation efforts with platform teams.
• Partner with SRE and operations teams to monitor security telemetry and triage cloud threats.
• Participate in incident response and root-cause analysis.

Required qualifications

• 4+ years of experience in cloud security, DevOps, or platform engineering.
• Deep hands-on experience securing cloud environments (AWS, GCP, or Azure).
• Strong understanding of containerization security best practices, image hardening, and Kubernetes security controls.
• Proficiency in Python, Go, or Bash.
• Experience with automation tools.
• Familiarity with CI/CD security integrations, SAST, SBOM, SIEM, and CSPM tools.

Nice to have

• AWS Certified Security certification
• CISSP certification
• CCSK certification
• Experience implementing Zero Trust architectures within a modern enterprise
• Familiarity with Policy-as-Code frameworks (e.g., Open Policy Agent)
• Demonstrated passion for developer enablement and building security as a product

Before you apply

• For U.S. Roles: applicant must be a U.S. citizen, lawful permanent resident of the United States (i.e. Green Card holder), or other protected individual.
• For U.K. Roles: requires Baseline Personnel Security Standard (BPSS) checks and eligibility to obtain UK Security Clearance (SC).
• For Canada Roles: must obtain and hold a security clearance at the reliability status level and pass security assessment for the Canadian Controlled Goods Program (CGP) and ITAR.

About the company

Xona is the navigational intelligence company bringing real-time, centimeter-level certainty to any device, anywhere on Earth. With Pulsar, Xona will offer a future-proof, backwards-compatible global positioning system.