GRC Security Engineer: FedRAMP/IL5 RMF Expert

SpaceXSI; Austin (TX); On-site; USD 100,000 - 198,000; Full time

Benefits offered by this job

Equity

Medical coverage

Vision coverage

Dental coverage

401(k) retirement plan

Job summary

SpaceXSI is seeking an experienced Security Engineer - GRC Federal Frameworks to scale our GRC program across IL4/5 authorization efforts and continuous monitoring. You will translate complex control requirements, work with engineers to implement controls, and drive risk management throughout the product lifecycle.

You will guide audits, certifications, and assessments, ensuring regulatory and operational compliance while partnering with cross-functional teams to raise the security posture of

Qualifications

• Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field.
• 3+ years of experience in governance, risk management, compliance, or technology audit roles.
• At least 1 year of experience with FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring.
• Experience implementing and maintaining security compliance frameworks and cloud security controls.
• Expert-level knowledge in at least one of the following domains: DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. and/or NIST 800-171/CMMC.

Responsibilities

• Execute security compliance implementation and audits (e.g. DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. (Rev. 5 / CR2026), NIST 800-53, NIST 800-171/CMMC, Risk Management Framework).
• Oversee audits, certifications, third-party assessments, and vulnerability management to maintain compliance and operational credibility.
• Design and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, POAMs, and STIGs.
• Ensure the implementation, oversight, monitoring, and maintenance of security configurations, practices, and procedures throughout the project lifecycle.
• Serve as a liaison between system owners, security personnel, and cross-functional teams to facilitate effective communication, collaboration, and control implementation.
• Lead Risk Management A&A processes, cloud system risk assessments, compliance reviews for new products/changes/features, and process enhancements.
• Conduct regular risk assessments, scenario analyses, and proactive evaluations of emerging threats, certifications, requirements, and technologies in the AI landscape.
• Act as a subject matter expert, providing guidance on risk, compliance, and cybersecurity matters; translate business and technical risks for leadership.
• Create and present regular reports on GRC performance, risks, and compliance status to senior leadership and stakeholders.

Skills

GRC governance

FedRAMP IL5

NIST 800-53/800-171/CMMC

CI/CD security / DevSecOps

Risk assessment & threat modeling

Clearance TS preferred

Education

Bachelor's degree in CS/Information Security/Cybersecurity or engineering

Tools

IAM systems

SIEM

Policy-as-code (OPA)

CI/CD tooling

Job description

SpaceXSI is seeking an experienced Security Engineer - GRC Federal Frameworks to scale our GRC program across IL4/5 authorization efforts and continuous monitoring. You will translate complex control requirements, work with engineers to implement controls, and drive risk management throughout the product lifecycle.

You will guide audits, certifications, and assessments, ensuring regulatory and operational compliance while partnering with cross-functional teams to raise the security posture of