Software Engineer- Cybersecurity and Cryptography

Xona - Burlingame, CA

Hiring: Software Engineer- Cybersecurity and Cryptography Company: Xona Location: Burlingame, CA Job Posted Time: 2026-09-14 07:42:39 Employment Type: Hybrid Target Skills & Keywords : AES, AWS, C, C++, CI/CD, DAST, Encryption, IAM, Kubernetes, PKI, Pulsar, Python, REST, SAST, Segment, TLS, Zero Trust About the job Experience: •5+ years of software engineering experience with a heavy focus on security-sensitive applications. Required Skills: •This isn't just a standard security role; you will be a primary architect and implementer of the cryptographic foundations that protect our satellite constellation and the sensitive data moving between Earth and orbit. •Build the "trust anchor" of our mission, ensuring that command uplinks, telemetry downlinks, and user data remain authenticated and encrypted against sophisticated threats. Qualifications: •Cryptographic Implementation: Design and implement production-ready cryptographic modules for key management, identity and access management (IAM), and secure communication protocols (e.g., TLS, AES-GCM, ECC). •Defensive Programming: Apply rigorous defensive programming techniques to eliminate common vulnerabilities (buffer overflows, integer underflows, race conditions) and ensure software resilience against adversarial inputs. •Persistent Memory Integration: Develop secure data-at-rest solutions for persistent memory (PMEM) architectures, ensuring that sensitive cryptographic material stored in non-volatile RAM is encrypted and protected against cold-boot or physical extraction attacks. •Ground Software Development: Lead the development of high-availability ground station software that manages the security lifecycle of the satellite constellation. •Root of Trust & HSM Integration: Integrate Hardware Security Modules (HSMs) and Trusted Platform Modules (TPMs) into the ground infrastructure to ensure secure key storage and signing operations. •Languages: Mastery of C/C++ with a focus on memory-safe patterns and defensive coding standards (e.g., MISRA C, SEI CERT). Proficiency in Python for security tooling. •Systems Programming: Direct experience programming for persistent memory or non-volatile storage, including an understanding of memory-mapped files and data consistency models. •Applied Cryptography: Deep understanding of symmetric/asymmetric encryption, digital signatures, hashing, and Public Key Infrastructure (PKI). •Security Infrastructure: Hands-on experience with Cloud Security (AWS), Kubernetes security, and automated CI/CD security scanning (SAST/DAST). •Knowledge of Post-Quantum Cryptography (PQC) standards. Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!