Senior Cybersecurity Engineer

Xona

. Lead cybersecurity strategy and implementation by assessing security posture, identifying risks and gaps, setting priorities, and developing a security roadmap .

Posted 11/11/2026full-timeBurlingame • California • United StatesSenior💰 $180,000 - $210,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in leading cybersecurity strategy and implementation, particularly in regulated environments, with a strong focus on NIST SP 800-171 and CMMC Level 2 compliance. Proficient in security controls across various domains, including identity management, endpoint protection, and incident response.

Highest-signal resume keywords

NIST SP 800-171 ImplementationCMMC Level 2 Certification PreparationMicrosoft GCC High AdministrationIncident Response ManagementCISSP or Equivalent Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Strategy DevelopmentRisk AssessmentSecurity Control ImplementationVulnerability ManagementIdentity SecurityNetwork SecurityCloud SecurityCompliance DocumentationSecurity MonitoringIncident Response

Soft Skills

Strong Communication SkillsDocumentation SkillsCollaboration with Technical Teams

Tools & Technologies

Microsoft GCC HighAzure GovernmentEntra IDIntuneDefenderPurviewPowerShellPythonBash

Certifications & Qualifications

CMMC Certified Professional (CCP)CMMC Certified Assessor (CCA)CISSPRelevant GIAC Certifications

Industry Keywords

CUI SafeguardingDFARS RequirementsITAR/EAR Data ProtectionAerospace Industry ExperienceDefense Industry ExperienceSpace Industry ExperienceFacility Security Officer ResponsibilitiesFacility Clearance Experience

Tech Stack

Tools & technologies

AzureCloudCyber SecurityPython

About the role

Key responsibilities & impact

Lead cybersecurity strategy and implementation by assessing security posture, identifying risks and gaps, setting priorities, and developing a security roadmap
Drive CMMC Level 2 readiness through NIST SP 800-171 implementation, assessment scoping, compliance documentation, assessment coordination, and certification preparation
Design, implement, and maintain security controls across identity and access management, endpoint protection, network security, cloud environments, vulnerability management, and Microsoft GCC High
Establish security monitoring, incident response, vulnerability remediation, and ongoing compliance processes
Evaluate third-party providers and technologies protecting sensitive and regulated information
Partner with engineering, IT, operations, legal, and leadership to integrate security into business and technical decisions
Support government compliance obligations and communicate risks and recommendations

Requirements

What you’ll need

7+ years of relevant cybersecurity experience, preferably in regulated or government-contracting environments
Demonstrated experience implementing NIST SP 800-171 controls and preparing organizations for CMMC Level 2 certification
Hands-on experience administering Microsoft GCC High or Azure Government environments, including Entra ID, Intune, Defender, and Purview
Strong technical expertise across identity security, endpoint protection, network and cloud security, vulnerability management, and incident response
Working knowledge of CUI safeguarding, DFARS requirements, and ITAR/EAR data protection
Ability to independently assess security environments, prioritize initiatives, and drive implementation
Strong communication and documentation skills, including experience working with assessors, technical teams, and leadership
Relevant technical degree or equivalent professional experience
CMMC Certified Professional (CCP) minimum; CMMC Certified Assessor (CCA) preferred
CISSP or equivalent senior security certification
Active Secret Clearance
U.S. citizenship, lawful permanent residency, or other protected-individual status for U.S. roles
Preferred: aerospace, defense, or space industry experience
Preferred: completed CMMC Level 2 certification experience
Preferred: CGRC, Microsoft security certifications, or relevant GIAC certifications
Preferred: security automation using PowerShell, Python, or Bash
Preferred: FAR/DFARS, NISPOM, DCSA reviews, or Facility Security Officer responsibilities
Preferred: Facility Clearance experience

Benefits

Comp & perks

Equity
Bonus
Hybrid work arrangement