Security Engineer - GRC Federal Frameworks
Core
Provide and sustain deep expertise in NIST RMF, FedRAMP, and IL4/IL5 authorization processes to ensure SpaceXSI operates within regulatory and ethical boundaries.
Role type
Senior GRC Engineer (Federal Frameworks)
Builds
Grok for Government
Domain
AI/ML Security, Federal Compliance
Deliverable
production ML models
Required skills
NIST RMF, FedRAMP, IL4/IL5, DoD Cloud Computing SRG, NIST 800-53, NIST 800-171, CMMC, vulnerability management, continuous monitoring, POAMs, STIGs
Preferred skills
CI/CD integration, DevSecOps, policy-as-code (OPA), technical control implementation (IAM, encryption, hardening), ISO 27001, ISO 42001, SOC 2
Technologies
OPA, CI/CD pipelines
Responsibilities
Execute security compliance implementation and audits; oversee audits, certifications, and vulnerability management; design and implement risk mitigation strategies; lead Risk Management Assessment and Authorization (A&A) processes; conduct regular risk assessments and scenario analyses; act as a subject matter expert for risk and compliance; create and present regular reports on GRC performance.
Seniority
Senior, hands-on IC
