Software Engineer- Cybersecurity and Cryptography

Xona Space Systems
United States
2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Job source

Tech stack

Kubernetes Security Amazon Web Services C++ (Programming Language) Cloud Computing Security Cyber Security Computer Programming Data Security Digital Signature Hardware Security Module Identity and Access Management Python (Programming Language) Key Management
+11 more
MISRA C (C Programming Language) Non-Volatile Memory Public Key Infrastructure Zero Trust Network Access Software Engineering System Programming HybridCloud SC Clearance Static Application Security Testing Vulnerability Analysis Dynamic Application Security Testing

Job description

We are seeking a high-caliber Software Engineer specializing in Cybersecurity and Cryptography to lead the development of our production-grade ground segment software. This isn’t just a standard security role; you will be a primary architect and implementer of the cryptographic foundations that protect our satellite constellation and the sensitive data moving between Earth and orbit.

You will build the ā€œtrust anchorā€ of our mission, ensuring that command uplinks, telemetry downlinks, and user data remain authenticated and encrypted against sophisticated threats., Cryptographic Implementation: Design and implement production-ready cryptographic modules for key management, identity and access management (IAM), and secure communication protocols (e.g., TLS, AES-GCM, ECC). Defensive Programming: Apply rigorous defensive programming techniques to eliminate common vulnerabilities (buffer overflows, integer underflows, race conditions) and ensure software resilience against adversarial inputs. Persistent Memory Integration: Develop secure data-at-rest solutions for persistent memory (PMEM) architectures, ensuring that sensitive cryptographic material stored in non-volatile RAM is encrypted and protected against cold-boot or physical extraction attacks. Ground Software Development: Lead the development of high-availability ground station software that manages the security lifecycle of the satellite constellation. Root of Trust & HSM Integration: Integrate Hardware Security Modules (HSMs) and Trusted Platform Modules (TPMs) into the ground infrastructure to ensure secure key storage and signing operations.

Requirements

Experience: 5+ years of software engineering experience with a heavy focus on security-sensitive applications. Languages: Mastery of C/C++ with a focus on memory-safe patterns and defensive coding standards (e.g., MISRA C, SEI CERT). Proficiency in Python for security tooling. Systems Programming: Direct experience programming for persistent memory or non-volatile storage, including an understanding of memory-mapped files and data consistency models. Applied Cryptography: Deep understanding of symmetric/asymmetric encryption, digital signatures, hashing, and Public Key Infrastructure (PKI). Security Infrastructure: Hands-on experience with Cloud Security (AWS), Kubernetes security, and automated CI/CD security scanning (SAST/DAST)., Experience with Satellite Ground Segment software or aerospace communications. Knowledge of Post-Quantum Cryptography (PQC) standards. Familiarity with hardware-level security and side-channel attack mitigation. Experience implementing Zero Trust architecture in hybrid-cloud environments.

For U.K. Roles: To comply with U.K. regulations, this role requires Baseline Personnel Security Standard (BPSS) checks, and successful candidates must be eligible to obtain UK Security Clearance (SC).

About the company

Xona is the navigational intelligence company bringing real-time, centimeter-level certainty to any device, anywhere on Earth.

With Pulsar - the world’s most advanced PNT satellite infrastructure in Low Earth Orbit - Xona will offer a future-proof, backwards-compatible global positioning system optimized for absolute precision, superior power, and robust protection.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on dice.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:04 min

Embedding data security and applied ethics into developer education

Daniel Tao +3 Ā· WWC 2024

1:45 min

Transitioning from software development to security roles

Stefania Chaplin Ā· WWC 2022

41 sec

Massive client data loss and bio-digital storage

Chris Heilmann +1 Ā· LIVE

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira Ā· Coffee With Developers

43 sec

Software engineering journey and local Manchester roots

Jonathan Tang Ā· Coffee With Developers

35 sec

Summarizing data integration challenges in security operations

Jennifer Reif Ā· LIVE

Videos

See all

Related articles

See all