Security GRC Engineer
Cursor · San Francisco, California; Palo Alto, California
What the posting says
Each fact carries its state:Statedfound in the postingConflictstwo statements disagree, both quotedNot mentionedthe posting does not say
- Employment typeStated
- Full time
- Work arrangementStated
- On-site
Not mentioned in this posting
“Not mentioned” means the posting does not say. It is not a no. You could ask the recruiter.
- PayNot mentioned
- The posting does not say
- ShiftNot mentioned
- The posting does not say
- ExperienceNot mentioned
- The posting does not say
- EducationNot mentioned
- The posting does not say
- Visa sponsorshipNot mentioned
- The posting does not say
Requirements, each with its sentence from the posting
These are the employer’s words. The index does not judge whether you meet them.
- No requirement has been itemised for this posting yet. The employer’s words are in the full posting below.
Read the full posting as the employer wrote it
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.
SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.
About the Role
Security GRC Engineers design, implement, and scale our governance, risk, and compliance (GRC) program. You'll lead automation of compliance workflows, build self-serve tools to enable GTM teams, and ensure our products and infrastructure meet the highest security standards. This role blends technical implementation with strategic program development, directly shaping how we build trust with customers.
You may be a fit if
You have experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1.
You're comfortable tracing an external claim back to how the product and infrastructure are actually configured — you use coding agents and curiosity to confirm that what we say is what we do, flag issues that affect the security and AI governance program, and drive them to the right outcome.
You have strong cross-functional collaboration skills, especially with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators.
Sample projects include
Automate evidence gathering and continuous control testing.
Own the relationship with audit firms and customers — you're the person who explains the security and AI governance program and earns their trust in it.
Conduct security compliance reviews for new products, features, and vendors.
Support Legal in contract negotiations with timely, accurate guidance on security and AI governance terms.
Support incident response communications — draft and review customer-facing updates during security incidents.
Build self-serve documentation and tools to answer customer security and AI governance inquiries.
Maintain corporate security policies.
Applying
If there appears to be a fit, we'll reach out to schedule 2–3 short technicals. After that, we'll schedule an onsite at our office, where you'll work on a small project, discuss ideas, and meet the team.
The posting text is reproduced as the employer wrote it; the index adds nothing to it.