Senior Cybersecurity Engineer

The role

The Senior Cybersecurity Engineer will lead the development and implementation of cybersecurity and compliance programs. This role involves strengthening security infrastructure and preparing the company for CMMC certification across IT, engineering, and cloud environments.

What you will do

• Lead cybersecurity strategy and implementation.
• Assess security posture, identify risks and gaps, and develop a security roadmap.
• Drive CMMC Level 2 readiness and implement NIST SP 800-171 security requirements.
• Maintain compliance documentation and coordinate assessments.
• Design, implement, and maintain security controls across identity, endpoint, network, cloud, and vulnerability management.
• Manage security operations, incident response, and vulnerability remediation.
• Evaluate third-party providers and technologies.
• Partner with engineering, IT, operations, legal, and leadership to integrate security into business decisions.

Required qualifications

• 7+ years of relevant cybersecurity experience
• Demonstrated experience implementing NIST SP 800-171 controls and preparing organizations for CMMC Level 2 certification
• Hands-on experience administering Microsoft GCC High or Azure Government environments, including Entra ID, Intune, Defender, and Purview
• Strong technical expertise across identity security, endpoint protection, network and cloud security, vulnerability management, and incident response
• Working knowledge of CUI safeguarding, DFARS requirements, and ITAR/EAR data protection
• Ability to independently assess security environments, prioritize initiatives, and drive implementation
• Strong communication and documentation skills
• Relevant technical degree or equivalent professional experience
• CMMC Certified Professional (CCP) minimum
• CISSP or equivalent senior security certification
• Active Secret Clearance

Nice to have

• CMMC Certified Assessor (CCA)
• Aerospace, defense, or space industry experience
• Experience supporting a completed CMMC Level 2 certification
• CGRC, Microsoft security certifications (SC-100, SC-300, SC-200), or relevant GIAC certifications
• Experience with security automation using PowerShell, Python, or Bash
• Experience with FAR/DFARS, NISPOM, DCSA reviews, or Facility Security Officer (FSO) responsibilities
• Facility Clearance (FCL) experience

Before you apply

• For U.S. Roles: applicant must be a U.S. citizen, lawful permanent resident of the United States (i.e. Green Card holder), or other protected individual as defined by 8 U.S.C. 1324b(a)(3)
• For U.K. Roles: requires Baseline Personnel Security Standard (BPSS) checks and eligibility to obtain UK Security Clearance (SC)
• For Canada Roles: must obtain and hold a security clearance at the reliability status level, and pass security assessment for the Canadian Controlled Goods Program (CGP) and ITAR

About the company

Xona is the navigational intelligence company bringing real-time, centimeter-level certainty to any device, anywhere on Earth. With Pulsar, Xona will offer a future-proof, backwards-compatible global positioning system.