Skip to content
XA
xAI

Vulnerabilty Analyst

Read straight from xAI's careers page, verified 1h ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
Salary$100k – $258k
LocationAustin, TX, New York, NY, Palo Alto, CA, Washington, D.C., Austin, TX; New York, NY; Palo Alto, CA; Washington, DC
Typefull-time
DepartmentInformation Security
Company size1,001–5,000 people
PostedSep 24, 2026 · 1mo ago
Verified live1h ago
At a glanceSummarised by Seekless from the posting.
Experience in vulnerability assessment, data management, and security frameworks
Experience with Python for security data manipulation
Experience with MITRE ATT&CK framework for security analysis
Experience creating dashboard-based reports to communicate security findings
Strong understanding of vulnerability impact, risk assessment, and mitigation strategies
Excellent communication and stakeholder management skills
Strong analytical skills and a keen ability to evaluate risk
Mastery of CVSS and its environmental processing
Experience with Elastic/OpenSearch
Familiarity with Kibana/Grafana dashboarding
Development of security automation playbooks
Experience with AWS and/or GCP
Experience building agentic workflows for vulnerability management
To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State.
Skills
Python
MITRE ATT&CK
CVSS
Elastic
OpenSearch
Kibana
Grafana
AWS
GCP
Benefits
Equity
Medical insurance
Vision insurance
Dental insurance
401(k)
Disability insurance
Life insurance
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.
SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We’re creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.
VULNERABILITY ANALYST
The Vulnerability Management team is responsible for assessing and mitigating security risks across our portfolio. This role will focus on vulnerability analysis and risk assessment, ensuring the organization is well-protected against emerging threats. The ideal candidate will have deep expertise in vulnerability scoring, data analysis, and automation.
Our small but fast-paced team values innovation and creativity. You’ll have the opportunity to make a significant impact on the future and our aspiration to build the Everything App. If you thrive in a dynamic, high-growth tech environment and relish the opportunity to collaborate with passionate, driven over-achievers, your career with us will be both exhilarating and fulfilling.
RESPONSIBILITIES:
•
Responsible for evaluating vulnerabilities and determining their impact based on industry standards
•
Work closely with cross-functional teams to improve security posture and integrate best practices
•
Conduct vulnerability assessments using the CVSS standard as defined by First.org
•
Understand and implement vector strings and vector chaining for risk evaluation
•
Perform data analysis to assess security risks across the organization
•
Identify vulnerability reachability and impact to prioritize security responses
•
Write Python scripts to manage and manipulate data from sources such as CSV, Excel, JSON, and RESTful APIs
•
Apply MITRE ATT&CK framework for attack path analysis
•
Create data reporting solutions, including simple dashboards
•
Engage with stakeholders across the organization to ensure security buy-in
•
Demonstrate strong critical analysis, problem-solving, and security expertise
BASIC QUALIFICATIONS:
•
Bachelor’s degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree
•
Experience with the Python programming language for security data manipulation such as GO, C#, C/C++, or Rust
•
Experience in vulnerability assessment, data management, and security frameworks
PREFERRED SKILLS AND EXPERIENCE:
•
Experience with MITRE ATT&CK framework for security analysis
•
Experience creating dashboard-based reports to communicate security findings
•
Strong understanding of vulnerability impact, risk assessment, and mitigation strategies
•
Excellent communication and stakeholder management skills
•
Strong analytical skills and a keen ability to evaluate risk
•
Mastery of CVSS and its environmental processing
•
Experience with Elastic/OpenSearch
•
Familiarity with Kibana/Grafana dashboarding
•
Development of security automation playbooks
•
Experience with AWS and/or GCP
•
Experience building agentic workflows for vulnerability management
COMPENSATION AND BENEFITS:
$100,000 - $258,000 USD
Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.
ITAR REQUIREMENTS:
•
To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.