Security Engineer, GRC Sales

The role

You will act as a security-minded presales partner for the sales team. You will answer vendor security questionnaires and join customer meetings as the security and compliance expert, and help run third-party risk processes.

What you will do

• Support sales as a cybersecurity and GRC presales partner in customer and prospect meetings
• Own and improve responses to customer vendor security questionnaires, RFPs and due-diligence requests
• Build working fluency in AI/LLM systems, CI/CD, identity and access management, DevSecOps, Kubernetes and IT/AI governance
• Partner with Engineering, Security, Legal and Product to keep security collateral and Trust Center materials current
• Translate customer security requirements into internal asks and separate must-have commitments from out-of-scope demands
• Contribute to policies and procedures for third-party risk and vendor security due diligence
• Coordinate with GRC and security teams on SOC 2, ISO 27001, ISO 42001 and privacy evidence
• Identify patterns in questionnaires and deal blockers and feed them back to product and engineering
• Create status updates on questionnaire volume, deal-impacting security asks and vendor risk for sales and GRC leaders
• Communicate honestly with customers about what the company does and where risk is intentionally scoped

Required qualifications

• Bachelor's degree in computer science, information security, cybersecurity, or an engineering/STEM field
• 3+ years of experience in cybersecurity, GRC, third-party risk management, security assurance, or a customer-facing or sales-adjacent role
• U.S. citizen or national, U.S. lawful permanent resident, refugee under 8 U.S.C. § 1157, or asylee under 8 U.S.C. § 1158, or eligible to obtain the required authorizations from the U.S. Department of

Nice to have

• Experience completing or owning customer vendor security questionnaires
• Working technical fluency in AI/LLM or ML platforms, CI/CD, IAM, DevSecOps, Kubernetes and a major cloud (AWS, GCP or Azure)
• Understanding of SOC 2, ISO 27001 and NIST CSF
• Strong written and verbal communication skills
• 5+ years of cybersecurity, GRC, third-party risk or security assurance experience
• Prior presales security, solutions engineering or customer trust experience at a technology, cloud or AI company
• Hands-on experience with vendor risk management programs
• Familiarity with AI governance topics such as ISO 42001, NIST AI RMF and EU AI Act
• Experience maintaining a Trust Center or security questionnaire knowledge base; familiarity with Vanta, Drata or similar
• Ability to read architecture diagrams and IAM models

Benefits

• Equity
• Comprehensive medical, vision and dental coverage
• 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Various other discounts and perks

Before you apply

• Applicant must meet ITAR export rules: U.S. citizen or national, green card holder, refugee or asylee, or eligible to get authorization from the U.S. Department of State
• Role may include additional tasks as the team and business priorities change

About the company

SpaceX was founded to make life multiplanetary. SpaceXSI builds Super Intelligence through its Colossus supercomputers, Grok models and applications including Grok Bot, Grok Build, Grok Imagine, Grok Voice and X.