GRC Security Engineer — Federal Frameworks & FedRAMP

Maven Ventures; Palo Alto (CA); On-site; USD 100,000 - 198,000; Full time

Job summary

SpaceXSI is seeking a Governance, Risk, and Compliance (GRC) expert to scale our program. You will own the RMF and FedRAMP processes end-to-end, work with engineers to implement controls, and manage continuous monitoring artifacts for Grok for Government.

The role requires a strong technical background and the ability to communicate risk to leadership, with experience in DoD/NIST frameworks and cloud security controls. SpaceXSI offers competitive compensation and a comprehensive benefits package.

Qualifications

• Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field.
• 3+ years in governance, risk management, compliance, or technology audit roles.
• At least 1 year with FedRAMP/IL5, vulnerability management, and continuous monitoring.

Responsibilities

• Execute security compliance implementations and audits (e.g. DoD SRG IL5/IL6, FedRAMP Class D. Rev. 5/CR2026, NIST 800-53/NIST 800-171/CMMC).
• Oversee audits, certifications, third-party assessments, and vulnerability management to maintain compliance.
• Design and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, POAMs, and STIGs.
• Ensure implementation, oversight, monitoring, and maintenance of security configurations throughout the lifecycle.
• Serve as liaison between system owners, security and cross-functional teams for control implementation.
• Lead A&A processes, cloud system risk assessments, compliance reviews for new products/changes, process enhancements.
• Conduct regular risk assessments and analyses of emerging threats and technologies in AI landscape.
• Provide guidance on risk, compliance, and cybersecurity; translate risks for leadership.

Skills

GRC knowledge

FedRAMP IL5

NIST 800-53

Risk assessment

CI/CD security

Communication

Leadership

Education

Bachelor's degree in CS/InfoSec

Tools

Policy-as-code (OPA)

CI/CD tooling

Cloud security controls

Job description

SpaceXSI is seeking a Governance, Risk, and Compliance (GRC) expert to scale our program. You will own the RMF and FedRAMP processes end-to-end, work with engineers to implement controls, and manage continuous monitoring artifacts for Grok for Government.

The role requires a strong technical background and the ability to communicate risk to leadership, with experience in DoD/NIST frameworks and cloud security controls. SpaceXSI offers competitive compensation and a comprehensive benefits package.