Security Engineer, GRC Federal Frameworks

The role

This role leads governance, risk and compliance work for SpaceXSI's federal cloud products, mainly the NIST RMF, FedRAMP and IL4/IL5 authorization processes. The person manages continuous monitoring and annual assessments for Grok for Government and works directly with engineers on controls.

What you will do

• Carry out security compliance implementation and audits, such as DoD Cloud SRG IL5/IL6, FedRAMP, NIST 800-53, NIST 800-171/CMMC and RMF
• Oversee audits, certifications, third-party assessments and vulnerability management
• Design and implement risk mitigation strategies, including POA&Ms and STIGs
• Maintain security configurations, practices and procedures across the project lifecycle
• Act as liaison between system owners, security staff and cross-functional teams
• Lead risk assessment and authorization (A&A) processes and compliance reviews for new products and changes
• Run regular risk assessments and evaluate emerging threats in the AI landscape
• Advise on risk, compliance and cybersecurity, and explain business and technical risk to leadership
• Create and present reports on GRC performance and compliance status to senior leadership

Required qualifications

• Bachelor's degree in computer science, information security, cybersecurity, or an engineering or STEM discipline
• 3+ years in governance, risk management, compliance or technology audit roles
• 1+ years with FedRAMP/IL5 compliance, vulnerability management and continuous monitoring
• U.S. citizen or national, U.S. lawful permanent resident, refugee, or asylee, or eligible to obtain the required authorizations from the U.S. Department of State

Nice to have

• Expert-level knowledge in DoD Cloud SRG IL5/IL6, FedRAMP Class D and/or NIST 800-171/CMMC
• 5+ years of security compliance or technology audit experience
• Active Top Secret (TS) clearance
• Hands-on experience implementing technical controls such as IAM, logging, encryption and hardening
• Experience integrating compliance checks into CI/CD pipelines and compliance-as-code, such as OPA
• Experience in the tech or AI industry, particularly at startups
• Experience with commercial programs such as ISO 27001, ISO 42001, SOC 2, NIST CSF or NIST 800-53

Benefits

• Equity
• Comprehensive medical, vision and dental coverage
• 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Various discounts and perks

Before you apply

• Applicant must be a U.S. citizen or national, U.S. lawful permanent resident, refugee under 8 U.S.C. § 1157, or asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from

About the company

SpaceX was founded to make life multiplanetary. SpaceXSI builds Super Intelligence, including Colossus supercomputers, Grok models and applications such as Grok Bot, Grok Build, Grok Imagine, Grok Voice and X.