Security Engineer - GRC Federal Frameworks
xAI · Palo Alto, CA; Austin, TX; New York, NY; Washington, DC
About this role
**SpaceXSI — Security Engineer (GRC Federal Frameworks)** ## About the Role SpaceXSI is seeking an experienced and strategic **Governance, Risk, and Compliance (GRC)** team member to help scale our GRC program as SpaceXSI grows. This role ensures SpaceXSI operates within regulatory, ethical, and operational boundaries while building a culture of integrity and resilience. The primary focus is deep expertise in the **NIST Risk Management Framework (RMF)**, **FedRAMP**, and **Impact Level 4/5 (IL4/IL5)** authorization processes. You will apply these frameworks end-to-end through the full authorization and certification lifecycle, with strong command of the underlying technical implementation. You will also manage and maintain **Continuous Monitoring** artifacts and annual assessments for **Grok for Government**, and partner directly with engineers to interpret control requirements, design, implement, and validate controls. ## Responsibilities - Execute security compliance implementation and audits (e.g., **DoD Cloud Computing SRG IL5/IL6**, **FedRAMP Class D (Rev. 5 / CR2026)**, **NIST 800-53**, **NIST 800-171/CMMC**, **Risk Management Framework**) - Oversee audits, certifications, third-party assessments, and vulnerability management to maintain compliance and operational credibility - Design and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, **POAMs**, and **STIGs** - Ensure security configurations, practices, and procedures are implemented, monitored, and maintained throughout the project lifecycle - Serve as a liaison between system owners, security personnel, and cross-functional teams to facilitate effective communication and control implementation - Lead **Risk Management Assessment and Authorization (A&A)** processes, cloud system risk assessments, compliance reviews for new products/changes/features, and process enhancements - Conduct regular risk assessments, scenario analyses, and proactive evaluations of emerging threats, certifications, requirements, and technologies in the AI landscape - Act as a subject matter expert for risk, compliance, and cybersecurity; translate business and technical risks for leadership - Create and present regular reports on GRC performance, risks, and compliance status to senior leadership and stakeholders ## Basic Qualifications - Bachelor’s degree in computer science, information security, cybersecurity, or an engineering/STEM field - 3+ years of experience in governance, risk management, compliance, or technology audit roles - At least 1 year of experience with **FedRAMP/IL5 compliance**, vulnerability management, and continuous monitoring - Experience implementing and maintaining security compliance frameworks and cloud security controls - Expert-level knowledge in at least one of: **DoD Cloud Computing SRG IL5/IL6**, **FedRAMP Class D**, and/or **NIST 800-171/CMMC** ## Preferred Skills and Experience - 5+ years of security compliance or technology audit-related experience - Hands-on experience implementing technical controls (e.g., **IAM**, logging/monitoring, encryption, infrastructure hardening) and integrating compliance checks into **CI/CD** - Strong analytical, problem-solving, organizational, and project management skills; ability to balance innovation and oversight - Ability to evaluate control objectives with IT configurations - Hands-on technical control implementation (not just assessment) - Experience in the tech/AI i
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.