Security Engineer, GRC Sales
SpaceXSI · New York, NY; Palo Alto, CA; Washington, DC · $100k–$198k
Posted by SpaceXSI on their careers site · View the original posting
Draft this job a résumé tailored to it, and the application filled in
draft's reading
Open 19 days
The posting, as SpaceXSI wrote it
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.
SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.
SECURITY ENGINEER, GRC SALES
We are seeking a Governance, Risk, and Compliance (GRC) professional focused on third-party risk management and customer trust. This role sits at the intersection of cybersecurity GRC, vendor management, and sales enablement: you will act as a security-minded presales engineer for the sales team, develop enough depth in the SpaceXSI technical environment to accurately complete customer vendor security questionnaires, join customer meetings as the security and compliance subject matter expert, and help operate third-party risk and vendor management processes. The ideal candidate brings a cybersecurity and GRC perspective — fluent in how AI LLMs, CI/CD pipelines, identity and access management, DevOps, DevSecOps, Kubernetes, and IT/AI governance actually work in production — and can translate that understanding into clear, credible answers for enterprise buyers without slowing deals or overstating our posture.
This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities.
RESPONSIBILITIES
- Support the sales organization as a cybersecurity/GRC presales partner: attend customer and prospect meetings, present our security and compliance posture, and answer technical and control-related questions with accuracy and judgment
- Own and continuously improve responses to customer vendor security questionnaires, RFPs, SIG/CAIQ-style assessments, and due-diligence requests; maintain a reusable knowledge base of control narratives grounded in how SpaceXSI actually operates
- Build and maintain working fluency across the SpaceXSI environment — AI/LLM systems and model governance, CI/CD pipelines, identity and access management, DevOps and DevSecOps practices, Kubernetes platforms, and governance of IT and AI environments — sufficient to answer customer questions and escalate appropriately to engineering when needed
- Partner with Engineering, Security, Legal, and Product to keep questionnaire content, Trust Center materials, and security collateral current as architecture, controls, and certifications evolve
- Translate customer security requirements into actionab
[…]
vendor risk management programs — onboarding assessments, continuous monitoring, contract security exhibits, and residual-risk reporting
- Familiarity with AI governance topics relevant to customer diligence (e.g., model data handling, prompt/output controls, training-data boundaries, ISO 42001 / NIST AI RMF concepts, EU AI Act awareness)
- Experience maintaining a Trust Center, security FAQ library, or questionnaire knowledge base; familiarity with GRC platforms such as Vanta, Drata, or similar
- Ability to read architecture diagrams, IAM models, and pipeline/Kubernetes high-level designs and turn them into accurate, non-jargon customer narratives
- Comfort operating in fast-moving deal cycles while protecting accuracy — knowing when to say "I'll confirm with engineering" versus answering from established evidence
- Working knowledge of data privacy frameworks (e.g., GDPR, CCPA) as they appear in enterprise security and vendor assessments
- Certifications such as CISSP, CISA, CISM, CRISC, CTPRP, CIPT, CIPP/US, or similar preferred
- Experience supporting public sector, financial services, or other highly regulated customer diligence processes
COMPENSATION AND BENEFITS
$100,000 - $198,000 USD
Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.
ITAR REQUIREMENTS
- To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here .
SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice .