← All roles

Cloud Security Specialist – Platforms Engineering

Xona· Engineering
Apply on company site
Burlingame, California$153k - $178kFull-timePosted 1w ago

About the role

Proactive Cloud Security Specialist embedded in the Platform Engineering team to secure cloud environments, container orchestration platforms, and developer tooling. Focus on building secure foundations, automating compliance guardrails, and fostering a security-focused culture within the engineering organization.

Responsibilities

  • Cloud Security Architecture & Hardening: Design and enforce secure cloud patterns, zero-trust network segmentation, and hardening standards across AWS multi-account architecture and container platforms (e.g., Kubernetes).
  • Identity and Access Management (IAM): Architect secure authentication, authorization, secrets management, and zero-trust networking principles across all platform services.
  • Automation & Guardrails: Build automated security guardrails that empower developers to move fast safely, minimizing friction while maintaining strict compliance standards (e.g., CMMC, NIST 800-171, FIPS 140-3).
  • Vulnerability & Threat Management: Conduct regular security assessments, penetration testing, threat modeling, and container vulnerability scanning; coordinate remediation efforts with platform teams.
  • Incident Response & Forensics: Partner with SRE and operations teams to monitor security telemetry, triage cloud threats, and participate in incident response and root-cause analysis.

Qualifications

  • 4+ years of experience in cloud security, DevOps, or platform engineering, with a strong emphasis on security operations and architecture.
  • Deep hands-on experience securing cloud environments (AWS, GCP, or Azure). Certifications such as AWS Certified Security, CISSP, or CCSK are a plus.
  • Strong understanding of containerization security best practices, image hardening, and Kubernetes security controls (RBAC, network policies, runtime security).
  • Proficiency in languages such as Python, Go, or Bash, and experience with automation tools.
  • Familiarity with CI/CD security integrations, SAST, SBOM, SIEM, and CSPM tools.

Skills

Required:Cloud SecurityDevSecOps / Secure by DesignContainer & Kubernetes SecurityAutomation & Scripting
Nice to have:Security Tooling & CSPM
Last updated Oct 14, 2026. Interested? Apply on the company site.

About Xona

Next Era Navigational Intelligence | Xona

Xona is the navigation infrastructure company bringing real-time, centimeter-level certainty to any device, anywhere on Earth.

Location servicesPulsarGNSSNavigationPNTsatellites

More open roles at Xona