Security Engineer

Proxima Fusion GmbH; München; Sur place; EUR 90 000 - 140 000; Plein temps

Résumé du poste

Proxima Fusion GmbH in Munich seeks a Senior Security Engineer to own security implementation and monitoring—digital and physical—for a high-value fusion tech landscape. You will design and operate defenses, incidents, and risk controls across cloud and on-site infrastructure.

Key focus areas include SIEM management, Zero Trust maturation, and secure software supply chains. The role demands hands-on expertise and a proactive, automation-first mindset in a fast-growing team.

Qualifications

• 5+ years hands-on in security engineering with depth in identity, endpoint, and infrastructure.
• Builts/operated a SIEM and handled real incidents end-to-end.
• Implemented Zero Trust in production with IdP and device posture.
• Familiar with Google Workspace Enterprise security or similar.
• Automation-first: Terraform and scripting (Python, Bash, PowerShell).
• Fluent with CIS Benchmarks, NIST, ISO 27001, and NIS2.
• Ability to translate technical findings into business impact and actions.

Responsabilités

• Build security monitoring: select SIEM, tune alerts, reduce noise.
• Own end-to-end incident response and post-mortems.
• Harden environment: endpoint/EDR, IAM, network, infrastructure.
• Mature Zero Trust: unified IdP, device posture, conditional access.
• Handle edge cases with fast-growing teams and contractors.
• Secure Google-centric workspace: DLP, labeling, access controls.
• Secure software supply chain with platform team: CI/CD, secrets.
• Run vulnerability management and drive remediation with owners.
• Set and monitor physical security standards with ops.
• Support audits, pen tests, and provide technical evidence for compliance.

Connaissances

Security engineering

SIEM implementation

Zero Trust

Identity management

Endpoint security

Infrastructure security

Terraform automation

Scripting (Python/Bash)

Google Workspace security

Compliance standards

Outils

GCP

Kubernetes

Description du poste

WHO WE ARE

Proxima Fusion is Europe’s fastest-growing fusion company and the continent’s best-funded fusion player, as well as the first spin-out from the Max Planck Institute for Plasma Physics (IPP). Backed by over €650M and powered by a growing team across Munich, Zurich, and Oxford, we are developing the hardware and infrastructure needed to deliver the world’s first commercial stellarator fusion power plant.

Our concept advances the most mature fusion technology out there, the Wendelstein 7-X stellarator, through two next-generation machines: Alpha and Stellaris. Our work combines stellarator optimization, advanced computation, machine learning, and high-temperature superconducting magnets to unlock higher-performance designs that were previously out of reach.

Turning these designs into a functioning fusion power plant requires excellence and ownership across every discipline, from physics and engineering to software, manufacturing, law, and business functions.

WHY JOIN US

• Work on a civilisation-scale problem - Clean, baseload fusion energy is one of the few genuinely world-changing challenges, and every hire directly accelerates the path to a working stellarator.

• Grow as fast as the company does - With headcount set to roughly 5x in a few years and major technical milestones ahead on the path to our demo machine and first power plant, your role grows under you; today's hire is tomorrow's function lead.

• Tackle problems that don't exist elsewhere - Fusion sits at a rare intersection of deep-tech R&D, industrial procurement, government relations, and venture financing, so non-tech functions face challenges no other workplace can offer.

YOUR IMPACT

As our Senior Security Engineer in Munich, you will own security implementation and security monitoring, digital and physical, for a company building one of the most valuable bodies of fusion IP in Europe. Protecting it is its own challenge, and you are the person who will own it.

WHAT YOU WILL DO

• Build out our security monitoring capability: select and run the SIEM, decide what's worth alerting on, and tune out the noise.
• Own incident response end-to-end, from investigation through to a post-mortem and a fix that holds.
• Harden the environment hands-on across endpoint and EDR, identity and access, network, and infrastructure.
• Finish maturing Zero Trust: identity and device posture as joint conditions for access, and MFA everywhere.
• Handle the long tail of edge cases that comes with a fast-growing team and a lot of contractors.
• Secure our Google-centric workplace, where most of our IP moves - DLP, data classification and labeling, retention, and context-aware access.
• Secure the software supply chain in collaboration with our platform team: source control, access boundaries, secrets, and CI/CD.
• Run vulnerability and attack surface management, and drive remediation to be done with the teams that own the systems.
• Set and monitor our physical security standard with Business Operations, who implement it on site: access zones, CCTV and alerting, visitor and contractor access, and site access as one joiner-mover-leaver process with digital access, across multiple locations.
• Give our compliance work the technical substance it needs: evidence, remediation, and support through audits and pen tests.

WHO YOU ARE

Must have

• You have 5+ years hands-on in security engineering, with real depth in identity, endpoint, and infrastructure.
• You have built or substantially operated a SIEM, and run real incidents end-to-end.
• You have implemented Zero Trust in production - unified IdP and MDM, conditional access, device posture.
• You know Google Workspace Enterprise security well, or can get there fast from an equivalent platform.
• You are automation-first: Terraform, and scripting in Python, Bash, or PowerShell are no strangers to you.
• You are fluent in CIS Benchmarks, NIST, ISO 27001, and NIS2 without being ruled by them.
• You can turn a technical finding into a business impact and actionable solutions

Nice to have

• Interest or a track record in AI security.
• Hands-on cloud and container security: GCP, containers, Kubernetes.
• Certifications such as CISSP, GCIA, GCIH, CCSP, or Google Cloud Professional Cloud Security Engineer.
• Experience in a regulated, export-controlled, or high-security environment, where physical and digital security meet.

INTERVIEW PROCESS

• Recruiter Interview (30-60 min)
• Technical Screening (30 min)
• Technical Panel (3x60 min)
• CEO call (30 min)

This role sits at L2/L3 of our framework, please inquire during the recruitment process for further information

At Proxima Fusion, our mission is bold: making limitless clean energy a reality. To get there, we need a high-performing, diverse team that brings different perspectives, challenges assumptions, and builds together with purpose. We know that diversity of thought and experience leads to better ideas, stronger execution, and a more resilient team. We don’t look at how you identify, what you look like, who you choose to worship or what ethnicity you are. We care about what you can bring to the table.

Find Jobs in Germany on Arbeitnow