Federal GRC Security Engineer (IL5/IL6, FedRAMP)

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 100,000 - 198,000; Full time

Benefits offered by this job

Equity

Medical, vision, and dental coverage

401(k) retirement plan

Short & long-term disability insurance

Life insurance

Other discounts and perks

Job summary

SpaceXSI in Washington, DC is seeking an experienced Security Engineer to scale its GRC program across federal frameworks. You will execute compliance implementations, oversee audits, and design risk mitigation strategies across monitoring, contingency plans, and STIGs.

Candidates should have 3+ years in governance, risk, compliance roles and hands-on experience with FedRAMP IL5/IL6, NIST, and DoD SRG frameworks. This role is on-site in Washington, DC with strong leadership exposure.

Qualifications

• Bachelor's degree in CS/InfoSec/Cybersecurity or STEM field.
• 3+ years in governance, risk management, compliance, or tech audit.
• At least 1 year with FedRAMP/IL5, vulnerability mgmt, and continuous monitoring.
• Experience implementing and maintaining security frameworks & cloud security controls.
• Expert knowledge in DoD SRG IL5/IL6, FedRAMP Class D, and/or NIST 800-171/CMMC.

Responsibilities

• Execute security compliance implementations and audits across DoD SRG IL5/IL6, FedRAMP Class D.
• Oversee audits, third-party assessments, and vulnerability management.
• Design risk mitigation strategies for monitoring, contingency plans, POAMs, and STIGs.
• Manage security configuration across project lifecycle including oversight and maintenance.
• Coordinate among system owners, security personnel, and cross-functional teams.
• Lead A&A processes, cloud risk assessments, and compliance reviews for changes.
• Perform risk assessments and AI threat scenario analyses.
• Present GRC performance and risk reports to leadership.

Skills

Security compliance

Technology audit

CI/CD integration

DevSecOps

Policy as code

OPA

Stakeholder management

Cloud security controls

Threat risk assessment

Education

Bachelor's degree in Computer Science / Information Security / Cybersecurity

Tools

RMF

FedRAMP

IL4/IL5

DoD SRG IL5/IL6

FedRAMP Class D

NIST 800-53

NIST 800-171/CMMC

POAMs

STIGs

A&A

Continuous Monitoring

Job description

SpaceXSI in Washington, DC is seeking an experienced Security Engineer to scale its GRC program across federal frameworks. You will execute compliance implementations, oversee audits, and design risk mitigation strategies across monitoring, contingency plans, and STIGs.

Candidates should have 3+ years in governance, risk, compliance roles and hands-on experience with FedRAMP IL5/IL6, NIST, and DoD SRG frameworks. This role is on-site in Washington, DC with strong leadership exposure.