> Markdown version of [/jobs/ext/3865540-security-engineer-grc-federal-frameworks](https://www.wearedevelopers.com/jobs/ext/3865540-security-engineer-grc-federal-frameworks). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - GRC Federal Frameworks - **Company:** Space X - **Location:** Washington, DC, United States - **Salary:** $100,000.0 - $198,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Computing, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Monitoring of Systems, Identity and Access Management, Information Technology Audit, Software Vulnerability Management, Policy as Code, Data Logging, Delivery Pipeline, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Devsecops, Plan of Action and Milestones, Vulnerability Analysis - **Published:** October 22, 2026 - **Apply:** https://www.careerbuilder.com/job-details/security-engineer-grc-federal-frameworks-washington-dc--4d090383-677f-47c2-9bf0-77948f469cdf ## About the Role Risk, Regulations, U.S. National Institute of Standards and Technology (NIST), Government, Risk Management Framework (RMF), United States Department of Defense (DoD), Cloud Computing, Security Compliance, Maintain Compliance, Computer Security, * Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field * 3+ years of experience in governance, risk management, compliance, or technology audit roles. * At least 1 year of experience with FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring. * Experience implementing and maintaining security compliance frameworks and cloud security controls. * Expert-level knowledge in at least one of the following domains: DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. and/or NIST 800-171/CMMC., * 5+ years of security compliance or technology audit-related experience. * Hands-on experience implementing technical controls (e.g., IAM, logging and monitoring, encryption, infrastructure hardening) and integrating compliance checks into CI/CD pipelines. * Exceptional analytical, problem-solving, organizational, and project management skills, with the ability to balance innovation, oversight, and taking projects from conception to launch. * Ability to evaluate control objectives with IT configurations. * Hands-on experience implementing technical controls (e.g., IAM, logging and monitoring, encryption, infrastructure hardening) - not just assessing them. * Experience in the tech or AI industry, particularly with startups or innovative organizations. * Experience with CI/CD pipelines and DevSecOps practices, including implementing compliance-as-code (e.g., policy-as-code frameworks like OPA, automated control validation, continuous compliance monitoring integrated into the deployment pipeline). * Excellent communication, stakeholder management, and translation skills, with experience influencing cross-functional teams and communicating risks to leadership. * Experience with commercial compliance programs (e.g., ISO 27001, ISO 42001, SOC 2, NIST CSF, NIST 800-53, or similar compliance framework is a plus., * To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. ## Description We are seeking an experienced and strategic Governance, Risk, and Compliance (GRC) team member to help scale our GRC program as SpaceXSI grows. This critical role will ensure that SpaceXSI operates within regulatory, ethical, and operational boundaries while fostering a culture of integrity and resilience., * Execute security compliance implementation and audits (e.g. DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. (Rev. 5 / CR2026), NIST 800-53, NIST 800-171/CMMC, Risk Management Framework). * Oversee audits, certifications, third-party assessments, and vulnerability management to maintain compliance and operational credibility. * Design and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, Plan of Action and Milestones (POAMs), and STIGs. * Ensure the implementation, oversight, monitoring, and maintenance of security configurations, practices, and procedures throughout the project lifecycle. * Serve as a liaison between system owners, security personnel, and cross-functional teams to facilitate effective communication, collaboration, and control implementation. * Lead Risk Management Assessment and Authorization (A&A) processes, cloud system risk assessments, compliance reviews for new products/changes/features, and process enhancements. * Conduct regular risk assessments, scenario analyses, and proactive evaluations of emerging threats, certifications, requirements, and technologies in the AI landscape. * Act as a subject matter expert, providing guidance on risk, compliance, and cybersecurity matters; translate business and technical risks for leadership. * Create and present regular reports on GRC performance, risks, and compliance status to senior leadership and stakeholders.