Security Engineer (GRC Sales)

Join SpaceXSI as a Security Engineer focused on Governance, Risk, and Compliance (GRC) sales. In this mid-to-senior role, you will act as a security-minded presales engineer, develop expertise in the SpaceXSI technical environment, and support the sales organization by presenting our security and compliance posture. You will also own and improve responses to customer vendor security questionnaires, maintain working fluency across the SpaceXSI environment, and contribute to policies and procedures related to third-party risk and vendor security due diligence.

Act as a security-minded presales engineer for the sales team, developing depth in the technical environment to accurately complete customer vendor security questionnaires.

Working knowledge of data privacy frameworks (e.g., GDPR, CCPA) as they appear in enterprise security and vendor assessments

Responsibilities

• Own and continuously improve responses to customer vendor security questionnaires, RFPs, SIG/CAIQ-style assessments, and due-diligence requests; maintain a reusable knowledge base of control narratives.
• Build and maintain working fluency across the SpaceXSI environment — AI/LLM systems and model governance, CI/CD pipelines, identity and access management, DevOps and DevSecOps practices.

Requirements

• The ideal candidate brings a cybersecurity and GRC perspective — fluent in how AI LLMs, CI/CD pipelines, identity and access management, DevOps, DevSecOps, Kubernetes, and IT/AI governance actually work in production — and can translate that understanding into clear, credible answers for enterprise buyers without slowing deals or overstating our posture
• Strong written and verbal communication skills, with the ability to explain cybersecurity and GRC concepts to sales, customers, legal, and engineering audiences
• Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field
• Demonstrated experience completing or owning customer vendor security questionnaires and participating in security due-diligence discussions with enterprise buyers
• Solid understanding of common security and compliance frameworks used in customer assurance (e.g., SOC 2, ISO 27001, NIST CSF) and how controls map to questionnaire language
• 5+ years of experience in cybersecurity, GRC, third-party risk management, security assurance, or a closely related role with customer-facing or sales-adjacent responsibilities
• Working technical fluency across several of the following: AI/LLM or ML platforms, CI/CD pipelines, identity and access management, DevOps/DevSecOps, Kubernetes, and cloud environments (AWS, GCP, or Azure) — enough to understand control implications and speak credibly with engineers and customers
• 7+ years of cybersecurity, GRC, third-party risk, or customer trust / security assurance experience (mid-to-senior scope)
• Prior experience in a presales security, solutions engineering (security), customer trust, or sales-enablement GRC role at a technology, cloud, or AI company
• Hands-on or deeply adjacent experience with vendor risk management programs — onboarding assessments, continuous monitoring, contract security exhibits, and residual-risk reporting
• Experience maintaining a Trust Center, security FAQ library, or questionnaire knowledge base; familiarity with GRC platforms such as Vanta, Drata, or similar is a plus
• Ability to read architecture diagrams, IAM models, and pipeline/Kubernetes high-level designs and turn them into accurate, non-jargon customer narratives
• Comfort operating in fast-moving deal cycles while protecting accuracy — knowing when to say "I'll confirm with engineering" versus answering from established evidence
• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State

Preferred

• Familiarity with AI governance topics relevant to customer diligence (e.g., model data handling, prompt/output controls, training-data boundaries, ISO 42001 / NIST AI RMF concepts, EU AI Act awareness)
• Certifications such as CISSP, CISA, CISM, CRISC, CTPRP, CIPT, CIPP/US, or similar preferred
• Experience supporting public sector, financial services, or other highly regulated customer diligence processes is a plus

Pay

USD 100,000 - 228,000