GRC Security Engineer — Federal Frameworks & IL5

SpaceX Super Intelligence; Palo Alto (CA); On-site; USD 100,000 - 198,000; Full time

Benefits offered by this job

Equity

Medical coverage

401(k) retirement plan

Disability insurance

Life insurance

Discounts and perks

Job summary

SpaceXSI is seeking an experienced Governance, Risk, and Compliance (GRC) professional to scale our program. You will own RMF, IL4/IL5 authorization processes, and implement controls with engineers.

You will manage continuous monitoring, assessments for Grok for Government, and collaborate with cross-functional teams to strengthen security posture and compliance across the full lifecycle.

Qualifications

• Bachelor's degree in computer science, information security, or engineering/STEM.
• 3+ years in governance, risk management, compliance, or tech audit roles.
• At least 1 year of FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring.
• Experience implementing and maintaining security compliance frameworks and cloud security controls.
• Expert-level knowledge in DoD Cloud IL5/IL6, FedRAMP Class D., and/or NIST 800-171/CMMC.

Responsibilities

• Execute security compliance implementations and audits (NIST, DoD, FedRAMP).
• Oversee audits, certifications, third-party assessments, and vulnerability management.
• Design risk mitigation strategies, monitoring systems, and POAMs/STIGs.
• Ensure secure configurations throughout the project lifecycle.
• Liaise between system owners, security, and cross-functional teams.
• Lead A&A processes, cloud risk assessments, and product compliance reviews.
• Provide guidance on risk, translate technical risks for leadership.
• Create and present regular GRC performance and risk reports to leadership.

Skills

GRC

FedRAMP IL5

NIST 800-53

DoD SRG IL5/IL6

CI/CD security

Risk assessment

Security audits

Education

Bachelor's degree in CS/InfoSec

Tools

OPA (policy-as-code)

Continuous Monitoring tools

Job description

SpaceXSI is seeking an experienced Governance, Risk, and Compliance (GRC) professional to scale our program. You will own RMF, IL4/IL5 authorization processes, and implement controls with engineers.

You will manage continuous monitoring, assessments for Grok for Government, and collaborate with cross-functional teams to strengthen security posture and compliance across the full lifecycle.