Security Engineer - GRC Federal Frameworks

Job summary

Responsibilities

We are seeking an experienced and strategic Governance, Risk, and Compliance (GRC) team member to help scale our GRC program as SpaceXSI grows. This critical role will ensure that SpaceXSI operates within regulatory, ethical, and operational boundaries while fostering a culture of integrity and…

• Execute security compliance implementation and audits (e.g. DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. (Rev.
• Oversee audits, certifications, third-party assessments, and vulnerability management to maintain compliance and operational credibility.
• Design and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, Plan of Action and Milestones (POAMs), and STIGs.
• Ensure the implementation, oversight, monitoring, and maintenance of security configurations, practices, and procedures throughout the project lifecycle.
• Serve as a liaison between system owners, security personnel, and cross-functional teams to facilitate effective communication, collaboration, and control implementation.

What they're looking for

• Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field
• 3+ years of experience in governance, risk management, compliance, or technology audit roles.
• At least 1 year of experience with FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring.
• Experience implementing and maintaining security compliance frameworks and cloud security controls.
• Expert-level knowledge in at least one of the following domains: DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. and/or NIST 800-171/CMMC.