{"id":4231483,"url":"https://alion.io/job/xai-government-cloud-security-engineer","title":"Government Cloud Security Engineer","company":{"id":28,"name":"xAI","domain":"x.ai","url":"https://alion.io/company/xai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":82,"open_postings":87,"ghost_share":0,"stale_share":0.517,"repost_share":0,"time_to_fill_p50_days":68,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austin, United States","New York, United States","Palo Alto, United States","Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":198000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":198000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CMMC","optional":false},{"name":"DNS","optional":false},{"name":"FedRAMP","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"PKI","optional":false},{"name":"SIEM","optional":false},{"name":"VLAN","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Bicep","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"PowerShell","optional":true},{"name":"Terraform","optional":true},{"name":"Vault","optional":true}],"status":"live","first_seen_at":"2026-11-13T04:35:32Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T10:03:28Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.\nSpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.\nGOVERNMENT CLOUD SECURITY ENGINEER\nWe are seeking a skilled Government Cloud Security Engineer to design, implement, and maintain robust security controls across our Federal environments (including hybrid and multi-cloud scenarios). In this hands-on role, you will build, strengthen, and maintain our security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle. You will develop, implement, and leverage a range of security tools to detect threats, respond to incidents, and ensure alignment with industry standards and regulations. Lastly, you will be required to both achieve and maintain compliance with government regulations such as FedRAMP and CMMC. \nRESPONSIBILITIES:\nDesign, implement, and manage security architecture for federal and DoD deployments across cloud and on-premises environments, aligned to FedRAMP High, DoD IL5/IL6, and NIST SP 800-53 controls\nImplement and operate security tooling and services such as SIEM and log pipelines, EDR, vulnerability scanners, container runtime security, and policy-as-code enforcement\nBuilding secure containerized, Kubernetes-managed environments leveraging Zero Trust principles\nSecure Linux hosts, Kubernetes clusters, virtualization, and databases, including PKI and TLS, SSH and bastion access, and OS-level auditing\nDesign and enforce identity and access management, including SSO and federation, phishing-resistant MFA, RBAC, just-in-time privileged access, and periodic access reviews\nPartner with network teams to secure firewalls, VPN and IPsec, DNS, load balancers and reverse proxies, VLAN and subnet segmentation, and routing and switching ACLs\nProtect data encryption at rest and in transit, including envelope encryption and key management\nHarden operating systems, network devices, databases, and container platforms against DISA STIGs and CIS Benchmarks, and run credentialed vulnerability and compliance scanning to keep them compliant over time\nPerform detection, threat hunting, incident response, and root cause analysis, working with the SOC, maintain and exercise the incident response plan, and meet federal incident reporting requirements (e.g., CISA, DoD)\nOwn continuous monitoring end to end, including monthly vulnerability scanning and reporting, deviation requests, and driving POA&M items through remediation and closure\nSupport ATO packages and assessments, including System Security Plan (SSP) and control implementation documentation, 3PAO and DISA assessor evidence requests, and significant change requests\nPartner with developers and architects to build DevSecOps practices, including secure CI/CD pipelines, secure defaults, and security review of Infrastructure as Code, container images, and Kubernetes deployments before they ship\nBASIC QUALIFICATIONS:\nActive U.S. security clearance (e.g., Secret, Top Secret) or eligibility to obtain one\n3+ years of hands-on experience in cloud security, cybersecurity, DevSecOps, or infrastructure engineering with a security focus\nPREFERRED SKILLS AND EXPERIENCE:\nMicrosoft Certified: Azure Security Engineer Associate (AZ-500) or Cybersecurity Architect (SC-100), or other relevant certifications such as CISSP, CCSP, AWS Security Specialty, or GIAC (e.g., GCLD, GCIH)\nHands-on experience with Azure security services (Defender, Sentinel, Entra ID, Azure Policy, Key Vault, Purview) and with on-prem Linux, Kubernetes, and network infrastructure (Palo Alto, Cisco, Juniper)\nExperience with detection and response engineering and SOC operations\nKnowledge of container and Kubernetes security, software supply chain security (image signing, hardened base images), or AI/ML workload protection\nExperience supporting FedRAMP High or DoD IL5/IL6 authorizations, including continuous monitoring and assessor interactions\nHands-on expertise in building and maintaining secure infrastructure from the ground up in both cloud or on-prem environments\nProficiency in scripting/automation (PowerShell, Azure CLI, Bicep/ARM templates, Terraform) \nStrong understanding of identity federation, zero-trust principles, encryption, network security, and vulnerability management \nFamiliarity with compliance frameworks (NIST, CMMC, STIGs, etc.) and regulatory requirements \nExcellent problem-solving, analytical, and communication skills\nStrong verbal and written communication skills and the ability to stay composed under pressure\nCOMPENSATION AND BENEFITS:\n$100,000 - $198,000 USD\nBase salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.\nITAR REQUIREMENTS:\nTo conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. \nSpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.","description_format":"text","description_chars":6078,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity","Life insurance","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","LLM & Generative AI","Foundation Models","AI Research Labs"],"lifecycle":[{"event":"open","at":"2026-11-13T10:03:28Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":69,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-11-13T12:44:56Z"},"pay":{"stated_usd_annual":198000,"is_top_pay":true},"html_url":"https://alion.io/job/xai-government-cloud-security-engineer","json_url":"https://alion.io/job/xai-government-cloud-security-engineer.json","meta":{"generated_at":"2026-11-13T12:44:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25608,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":28},"rest":"https://alion.io/mcp/rest/get_company?id=28"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxai-government-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxai-government-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxai-government-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xai-government-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxai-government-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4231483}},{"tool":"search_jobs","arguments":{"company":"x.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4231483},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}