{"id":3044697,"url":"https://alion.io/job/xai-security-engineer-grc-federal-frameworks","title":"Security Engineer - GRC Federal Frameworks","company":{"id":28,"name":"xAI","domain":"x.ai","url":"https://alion.io/company/xai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":87,"open_postings":96,"ghost_share":0,"stale_share":0.521,"repost_share":0,"time_to_fill_p50_days":59,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States","Austin, United States","New York, United States","Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":198000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":198000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"FedRAMP","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"CI/CD","optional":true},{"name":"IAM","optional":true},{"name":"ISO 27001","optional":true},{"name":"ISO 42001","optional":true},{"name":"NIST CSF","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-21T21:08:57Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-25T06:38:46Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.\nSpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.\nABOUT THE ROLE:\nWe are seeking an experienced and strategic Governance, Risk, and Compliance (GRC) team member to help scale our GRC program as SpaceXSI grows. This critical role will ensure that SpaceXSI operates within regulatory, ethical, and operational boundaries while fostering a culture of integrity and resilience.\nThe primary focus of this role is to provide and sustain deep expertise in the NIST Risk Management Framework (RMF), FedRAMP, and Impact Level 4/5 (IL4/IL5) authorization processes. The ideal candidate will apply these frameworks end-to-end through the full authorization and certification lifecycle, with a strong command of the underlying technical implementation. In addition, this GRC team member will manage and maintain Continuous Monitoring artifacts and annual assessments for Grok for Government, and should be equally comfortable interpreting control requirements and partnering directly with engineers to design, implement, and validate the controls themselves.\nRESPONSIBILITIES:\nExecute security compliance implementation and audits (e.g. DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. (Rev. 5 / CR2026), NIST 800-53, NIST 800-171/CMMC, Risk Management Framework).\nOversee audits, certifications, third-party assessments, and vulnerability management to maintain compliance and operational credibility.\nDesign and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, Plan of Action and Milestones (POAMs), and STIGs.\nEnsure the implementation, oversight, monitoring, and maintenance of security configurations, practices, and procedures throughout the project lifecycle.\nServe as a liaison between system owners, security personnel, and cross-functional teams to facilitate effective communication, collaboration, and control implementation.\nLead Risk Management Assessment and Authorization (A&A) processes, cloud system risk assessments, compliance reviews for new products/changes/features, and process enhancements.\nConduct regular risk assessments, scenario analyses, and proactive evaluations of emerging threats, certifications, requirements, and technologies in the AI landscape.\nAct as a subject matter expert, providing guidance on risk, compliance, and cybersecurity matters; translate business and technical risks for leadership.\nCreate and present regular reports on GRC performance, risks, and compliance status to senior leadership and stakeholders.\nBASIC QUALIFICATIONS:\nBachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field\n3+ years of experience in governance, risk management, compliance, or technology audit roles.\nAt least 1 year of experience with FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring.\nExperience implementing and maintaining security compliance frameworks and cloud security controls.\nExpert-level knowledge in at least one of the following domains: DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. and/or NIST 800-171/CMMC.\nPREFERRED SKILLS AND EXPERIENCE:\n5+ years of security compliance or technology audit-related experience.\nHands-on experience implementing technical controls (e.g., IAM, logging and monitoring, encryption, infrastructure hardening) and integrating compliance checks into CI/CD pipelines.\nExceptional analytical, problem-solving, organizational, and project management skills, with the ability to balance innovation, oversight, and taking projects from conception to launch.\nAbility to evaluate control objectives with IT configurations.\nHands-on experience implementing technical controls (e.g., IAM, logging and monitoring, encryption, infrastructure hardening) - not just assessing them.\nExperience in the tech or AI industry, particularly with startups or innovative organizations.\nExperience with CI/CD pipelines and DevSecOps practices, including implementing compliance-as-code (e.g., policy-as-code frameworks like OPA, automated control validation, continuous compliance monitoring integrated into the deployment pipeline).\nExcellent communication, stakeholder management, and translation skills, with experience influencing cross-functional teams and communicating risks to leadership.\nExperience with commercial compliance programs (e.g., ISO 27001, ISO 42001, SOC 2, NIST CSF, NIST 800-53, or similar compliance framework is a plus.\nCOMPENSATION AND BENEFITS:\n$100,000 - $198,000 USD\nBase salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.\nITAR REQUIREMENTS:\nTo conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. \nSpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.","description_format":"text","description_chars":6003,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Life insurance","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["LLM & Generative AI","Foundation Models","AI Research Labs"],"lifecycle":[{"event":"open","at":"2026-10-21T23:58:22Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":59,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":198000,"is_top_pay":true},"html_url":"https://alion.io/job/xai-security-engineer-grc-federal-frameworks","json_url":"https://alion.io/job/xai-security-engineer-grc-federal-frameworks.json","meta":{"generated_at":"2026-10-25T08:42:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12322,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":28},"rest":"https://alion.io/mcp/rest/get_company?id=28"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxai-security-engineer-grc-federal-frameworks"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxai-security-engineer-grc-federal-frameworks"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxai-security-engineer-grc-federal-frameworks"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xai-security-engineer-grc-federal-frameworks\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxai-security-engineer-grc-federal-frameworks"}]}