Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Security Engineer - GRC Sales

xAI298 open roles

Pay
$100,000 – $228,000 a year
Where
Palo Alto, CA; New York, NY; Washington, DC
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Engineer - GRC SalesxAI · Palo Alto, CA; New York, NY; Washington, DC

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on xAI's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. xAI postings stay open a median of 52 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 3 days ago

xAI median: 52 days open

The posting

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.

SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

ABOUT THE ROLE:

We are seeking a mid-to-senior Governance, Risk, and Compliance (GRC) professional focused on third-party risk management and customer trust. This role sits at the intersection of cybersecurity GRC, vendor management, and sales enablement: you will act as a security-minded presales engineer for the sales team, develop enough depth in the SpaceXSI technical environment to accurately complete customer vendor security questionnaires, join customer meetings as the security and compliance subject matter expert, and help operate third-party risk and vendor management processes. The ideal candidate brings a cybersecurity and GRC perspective — fluent in how AI LLMs, CI/CD pipelines, identity and access management, DevOps, DevSecOps, Kubernetes, and IT/AI governance actually work in production — and can translate that understanding into clear, credible answers for enterprise buyers without slowing deals or overstating our posture.

This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities.

RESPONSIBILITIES:

  • Support the sales organization as a cybersecurity/GRC presales partner: attend customer and prospect meetings, present our security and compliance posture, and answer technical and control-related questions with accuracy and judgment.
  • Own and continuously improve responses to customer vendor security questionnaires, RFPs, SIG/CAIQ-style assessments, and due-diligence requests; maintain a reusable knowledge base of control narratives grounded in how SpaceXSI actually operates.
  • Build and maintain working fluency across the SpaceXSI environment — AI/LLM systems and model governance, CI/CD pipelines, identity and access management, DevOps and DevSecOps practices, Kubernetes platforms, and governance of IT and AI environments — sufficient to answer customer questions and escalate appropriately to engineering when needed.
  • Partner with Engineering, Security, Legal, and Product to keep questionnaire content, Trust Center materials, and security collateral current as architecture, controls, and certifications evolve.
  • Translate customer security requirements into actionable internal asks; help distinguish must-have contractual or control commitments from unreasonable or out-of-scope demands.
  • Contribute to policies, standards, and procedures related to third-party risk, customer assurance, and vendor security due diligence.
  • Coordinate with the broader GRC and security teams on overlapping frameworks and evidence (e.g., SOC 2, ISO 27001, ISO 42001, privacy commitments) so external answers remain consistent with our internal control environment and GRC tooling (e.g., Vanta).
  • Identify patterns in customer questionnaires and deal blockers; feed those insights back into product, engineering, and GRC roadmaps to reduce friction over time.
  • Create and present concise status updates on questionnaire volume, deal-impacting security asks, vendor risk posture, and emerging customer assurance themes to sales leadership and GRC stakeholders.
  • Champion clear, honest customer communication — building trust by explaining what we do, how we govern AI and infrastructure, and where we are intentionally scoping risk.

BASIC QUALIFICATIONS:

  • Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field.
  • 5+ years of experience in cybersecurity, GRC, third-party risk management, security assurance, or a closely related role with customer-facing or sales-adjacent responsibilities.
  • Demonstrated experience completing or owning customer vendor security questionnaires and participating in security due-diligence discussions with enterprise buyers.
  • Working technical fluency across several of the following: AI/LLM or ML platforms, CI/CD pipelines, identity and access management, DevOps/DevSecOps, Kubernetes, and cloud environments (AWS, GCP, or Azure) — enough to understand control implications and speak credibly with engineers and customers.
  • Solid understanding of common security and compliance frameworks used in customer assurance (e.g., SOC 2, ISO 27001, NIST CSF) and how controls map to questionnaire language.
  • Strong written and verbal communication skills, with the ability to explain cybersecurity and GRC concepts to sales, customers, legal, and engineering audiences.

PREFERRED SKILLS AND EXPERIENCE:

  • 7+ years of cybersecurity, GRC, third-party risk, or customer trust / security assurance experience (mid-to-senior scope).
  • Prior experience in a presales security, solutions engineering (security), customer trust, or sales-enablement GRC role at a technology, cloud, or AI company.
  • Hands-on or deeply adjacent experience with vendor risk management programs — onboarding assessments, continuous monitoring, contract security exhibits, and residual-risk reporting.
  • Familiarity with AI governance topics relevant to customer diligence (e.g., model data handling, prompt/output controls, training-data boundaries, ISO 42001 / NIST AI RMF concepts, EU AI Act awareness).
  • Experience maintaining a Trust Center, security FAQ library, or questionnaire knowledge base; familiarity with GRC platforms such as Vanta, Drata, or similar is a plus.
  • Ability to read architecture diagrams, IAM models, and pipeline/Kubernetes high-level designs and turn them into accurate, non-jargon customer narratives.
  • Comfort operating in fast-moving deal cycles while protecting accuracy — knowing when to say "I'll confirm with engineering" versus answering from established evidence.
  • Working knowledge of data privacy frameworks (e.g., GDPR, CCPA) as they appear in enterprise security and vendor assessments.
  • Certifications such as CISSP, CISA, CISM, CRISC, CTPRP, CIPT, CIPP/US, or similar preferred.
  • Experience supporting public sector, financial services, or other highly regulated customer diligence processes is a plus.

COMPENSATION AND BENEFITS:

$100,000 - $228,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ITAR REQUIREMENTS:

  • To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against xAI's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on xAI's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    xAI's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.