{"id":2990822,"url":"https://alion.io/job/xai-security-engineer-grc-sales","title":"Security Engineer - GRC Sales","company":{"id":28,"name":"xAI","domain":"x.ai","url":"https://alion.io/company/xai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":101,"ghost_share":0,"stale_share":0.614,"repost_share":0,"time_to_fill_p50_days":54,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States","New York, United States","Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":258000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":258000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Grok","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"EU AI Act","optional":true},{"name":"GDPR","optional":true},{"name":"IAM","optional":true},{"name":"NIST AI RMF","optional":true}],"status":"live","first_seen_at":"2026-10-21T06:07:01Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-21T19:54:31Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.\nSpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.\nABOUT THE ROLE:\nWe are seeking a mid-to-senior Governance, Risk, and Compliance (GRC) professional focused on third-party risk management and customer trust. This role sits at the intersection of cybersecurity GRC, vendor management, and sales enablement: you will act as a security-minded presales engineer for the sales team, develop enough depth in the SpaceXSI technical environment to accurately complete customer vendor security questionnaires, join customer meetings as the security and compliance subject matter expert, and help operate third-party risk and vendor management processes. The ideal candidate brings a cybersecurity and GRC perspective - fluent in how AI LLMs, CI/CD pipelines, identity and access management, DevOps, DevSecOps, Kubernetes, and IT/AI governance actually work in production - and can translate that understanding into clear, credible answers for enterprise buyers without slowing deals or overstating our posture.\nThis role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities.\nRESPONSIBILITIES:\nSupport the sales organization as a cybersecurity/GRC presales partner: attend customer and prospect meetings, present our security and compliance posture, and answer technical and control-related questions with accuracy and judgment. \nOwn and continuously improve responses to customer vendor security questionnaires, RFPs, SIG/CAIQ-style assessments, and due-diligence requests; maintain a reusable knowledge base of control narratives grounded in how SpaceXSI actually operates.\nBuild and maintain working fluency across the SpaceXSI environment - AI/LLM systems and model governance, CI/CD pipelines, identity and access management, DevOps and DevSecOps practices, Kubernetes platforms, and governance of IT and AI environments - sufficient to answer customer questions and escalate appropriately to engineering when needed.\nPartner with Engineering, Security, Legal, and Product to keep questionnaire content, Trust Center materials, and security collateral current as architecture, controls, and certifications evolve.\nTranslate customer security requirements into actionable internal asks; help distinguish must-have contractual or control commitments from unreasonable or out-of-scope demands.\nContribute to policies, standards, and procedures related to third-party risk, customer assurance, and vendor security due diligence.\nCoordinate with the broader GRC and security teams on overlapping frameworks and evidence (e.g., SOC 2, ISO 27001, ISO 42001, privacy commitments) so external answers remain consistent with our internal control environment and GRC tooling (e.g., Vanta).\nIdentify patterns in customer questionnaires and deal blockers; feed those insights back into product, engineering, and GRC roadmaps to reduce friction over time.\nCreate and present concise status updates on questionnaire volume, deal-impacting security asks, vendor risk posture, and emerging customer assurance themes to sales leadership and GRC stakeholders.\nChampion clear, honest customer communication - building trust by explaining what we do, how we govern AI and infrastructure, and where we are intentionally scoping risk.\nBASIC QUALIFICATIONS:\nBachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field.\n5+ years of experience in cybersecurity, GRC, third-party risk management, security assurance, or a closely related role with customer-facing or sales-adjacent responsibilities.\nDemonstrated experience completing or owning customer vendor security questionnaires and participating in security due-diligence discussions with enterprise buyers.\nWorking technical fluency across several of the following: AI/LLM or ML platforms, CI/CD pipelines, identity and access management, DevOps/DevSecOps, Kubernetes, and cloud environments (AWS, GCP, or Azure) - enough to understand control implications and speak credibly with engineers and customers.\nSolid understanding of common security and compliance frameworks used in customer assurance (e.g., SOC 2, ISO 27001, NIST CSF) and how controls map to questionnaire language.\nStrong written and verbal communication skills, with the ability to explain cybersecurity and GRC concepts to sales, customers, legal, and engineering audiences.\nPREFERRED SKILLS AND EXPERIENCE:\n7+ years of cybersecurity, GRC, third-party risk, or customer trust / security assurance experience (mid-to-senior scope).\nPrior experience in a presales security, solutions engineering (security), customer trust, or sales-enablement GRC role at a technology, cloud, or AI company.\nHands-on or deeply adjacent experience with vendor risk management programs - onboarding assessments, continuous monitoring, contract security exhibits, and residual-risk reporting.\nFamiliarity with AI governance topics relevant to customer diligence (e.g., model data handling, prompt/output controls, training-data boundaries, ISO 42001 / NIST AI RMF concepts, EU AI Act awareness).\nExperience maintaining a Trust Center, security FAQ library, or questionnaire knowledge base; familiarity with GRC platforms such as Vanta, Drata, or similar is a plus.\nAbility to read architecture diagrams, IAM models, and pipeline/Kubernetes high-level designs and turn them into accurate, non-jargon customer narratives.\nComfort operating in fast-moving deal cycles while protecting accuracy - knowing when to say \"I'll confirm with engineering\" versus answering from established evidence.\nWorking knowledge of data privacy frameworks (e.g., GDPR, CCPA) as they appear in enterprise security and vendor assessments.\nCertifications such as CISSP, CISA, CISM, CRISC, CTPRP, CIPT, CIPP/US, or similar preferred.\nExperience supporting public sector, financial services, or other highly regulated customer diligence processes is a plus.\nCOMPENSATION AND BENEFITS:\n$100,000 - $258,000 USD\nBase salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.\nSpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.","description_format":"text","description_chars":7114,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["LLM & Generative AI","Security Compliance","Foundation Models","AI Research Labs"],"lifecycle":[{"event":"open","at":"2026-10-21T09:50:58Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":54,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-10-21T20:50:45Z"},"pay":{"stated_usd_annual":258000,"is_top_pay":true},"html_url":"https://alion.io/job/xai-security-engineer-grc-sales","json_url":"https://alion.io/job/xai-security-engineer-grc-sales.json","meta":{"generated_at":"2026-10-21T20:50:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29694,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":28},"rest":"https://alion.io/mcp/rest/get_company?id=28"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxai-security-engineer-grc-sales"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxai-security-engineer-grc-sales"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxai-security-engineer-grc-sales"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xai-security-engineer-grc-sales\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxai-security-engineer-grc-sales"}]}