Security Engineer - GRC Federal Frameworks (AI)

Location: Palo Alto, CA; Austin, TX; New York, NY; Washington, DC. Applicants must meet U.S. ITAR eligibility requirements or be eligible to obtain the required U.S. Department of State authorizations.

Base salary: $100,000–$198,000 USD per year.

Company

xAI builds Super Intelligence products and the full AI stack, including large-scale compute infrastructure, Grok models, and applications such as Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X.

What you will do

• Scale the GRC program and maintain expertise across NIST RMF, FedRAMP, and Impact Level 4/5 authorization processes.
• Execute security compliance implementations and audits covering DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D, NIST 800-53, NIST 800-171/CMMC, and RMF.
• Lead Risk Management Assessment and Authorization processes, cloud risk assessments, compliance reviews, and process improvements.
• Design and implement risk mitigation strategies, monitoring systems, contingency plans, vulnerability scans, POA&Ms, and STIGs.
• Maintain security configurations, controls, continuous monitoring artifacts, and annual assessments for Grok for Government throughout the project lifecycle.
• Coordinate system owners, security personnel, engineers, and cross-functional stakeholders while reporting GRC performance, risks, and compliance status to leadership.

Requirements

• Bachelor’s degree in computer science, information security, cybersecurity, engineering, or another STEM field.
• At least 3 years of experience in governance, risk management, compliance, or technology audit roles.
• At least 1 year of experience with FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring.
• Experience implementing and maintaining security compliance frameworks and cloud security controls.
• Expert-level knowledge in at least one of DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D, or NIST 800-171/CMMC.

Nice to have

• 5+ years of security compliance or technology audit-related experience.
• Hands-on implementation of IAM, logging and monitoring, encryption, infrastructure hardening, and integration of compliance checks into CI/CD pipelines.
• Experience evaluating control objectives against IT configurations.
• Experience with CI/CD, DevSecOps, compliance-as-code, OPA or other policy-as-code frameworks, automated control validation, and continuous compliance monitoring.
• Experience in the technology or AI industry, particularly with startups or innovative organizations.
• Strong analytical, problem-solving, organizational, project management, communication, stakeholder management, and risk-translation skills.
• Experience with ISO 27001, ISO 42001, SOC 2, NIST CSF, NIST 800-53, or a similar commercial compliance framework.

Culture & Benefits

• Work on AI systems and government-focused products within an organization building the full Super Intelligence stack.
• Equity and comprehensive medical, vision, and dental coverage.
• Access to a 401(k) retirement plan.
• Short- and long-term disability insurance, life insurance, discounts, and other perks.