Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 199 days ago

Software Engineer- Cybersecurity and Cryptography

Xona52 open roles

Pay
$193,000 – $218,000 a year
Where
Burlingame, California
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSoftware Engineer- Cybersecurity and CryptographyXona · Burlingame, California

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Xona's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. Xona postings stay open a median of 55 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 199 days ago

Xona median: 55 days open

The posting

Xona is the navigational intelligence company bringing real-time, centimeter-level certainty to any device, anywhere on Earth.

With Pulsar – the world’s most advanced PNT satellite infrastructure in Low Earth Orbit – Xona will offer a future-proof, backwards-compatible global positioning system optimized for absolute precision, superior power, and robust protection.

We are seeking a high-caliber Software Engineer specializing in Cybersecurity and Cryptography to lead the development of our production-grade ground segment software. This isn't just a standard security role; you will be a primary architect and implementer of the cryptographic foundations that protect our satellite constellation and the sensitive data moving between Earth and orbit.

You will build the "trust anchor" of our mission, ensuring that command uplinks, telemetry downlinks, and user data remain authenticated and encrypted against sophisticated threats.

REQUIRED QUALIFICATIONS

• Cryptographic Implementation: Design and implement production-ready cryptographic modules for key management, identity and access management (IAM), and secure communication protocols (e.g., TLS, AES-GCM, ECC).

• Defensive Programming: Apply rigorous defensive programming techniques to eliminate common vulnerabilities (buffer overflows, integer underflows, race conditions) and ensure software resilience against adversarial inputs.

• Persistent Memory Integration: Develop secure data-at-rest solutions for persistent memory (PMEM) architectures, ensuring that sensitive cryptographic material stored in non-volatile RAM is encrypted and protected against cold-boot or physical extraction attacks.

• Ground Software Development: Lead the development of high-availability ground station software that manages the security lifecycle of the satellite constellation.

• Root of Trust & HSM Integration: Integrate Hardware Security Modules (HSMs) and Trusted Platform Modules (TPMs) into the ground infrastructure to ensure secure key storage and signing operations.

TECHNICAL QUALIFICATIONS

• Experience: 5+ years of software engineering experience with a heavy focus on security-sensitive applications.

• Languages: Mastery of C/C++ with a focus on memory-safe patterns and defensive coding standards (e.g., MISRA C, SEI CERT). Proficiency in Python for security tooling.

• Systems Programming: Direct experience programming for persistent memory or non-volatile storage, including an understanding of memory-mapped files and data consistency models.

• Applied Cryptography: Deep understanding of symmetric/asymmetric encryption, digital signatures, hashing, and Public Key Infrastructure (PKI).

• Security Infrastructure: Hands-on experience with Cloud Security (AWS), Kubernetes security, and automated CI/CD security scanning (SAST/DAST).

PREFERRED QUALIFICATIONS

• Experience with Satellite Ground Segment software or aerospace communications.

• Knowledge of Post-Quantum Cryptography (PQC) standards.

• Familiarity with hardware-level security and side-channel attack mitigation.

• Experience implementing Zero Trust architecture in hybrid-cloud environments.

For U.S. Roles: To comply with U.S. Government space technology export regulations, applicant must be a U.S. citizen, lawful permanent resident of the United States (i.e. Green Card holder), or other protected individual as defined by 8 U.S.C. 1324b(a)(3).

For U.K. Roles: To comply with U.K. regulations, this role requires Baseline Personnel Security Standard (BPSS) checks, and successful candidates must be eligible to obtain UK Security Clearance (SC).

For Canada Roles: Successful candidates must obtain and hold a security clearance at the reliability status level, and pass security assessment for the Canadian Controlled Goods Program (CGP) and ITAR.

We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Xona's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Xona's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Xona's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.