Senior Security Engineer

Pacific Fusion; San Leandro (CA); Hybrid; USD 110,000 - 130,000; Full time

Benefits offered by this job

Equity plan

6% employer 401(k) matching

Generous paid time off

Job summary

Pacific Fusion is seeking a Senior Security Engineer to design and enforce security controls across its hybrid environment of SaaS, on‑prem, and endpoints. You will implement configurations, monitor compliance, and respond to incidents while maintaining SSP documentation.

With 5+ years in IT security, you will partner with IT and operations to enable secure business operations, apply MFA and conditional access, and ensure devices and cloud services meet corporate security policies.

Qualifications

• 5+ years of experience in IT security, endpoint management, or related fields.
• Strong knowledge of SaaS application administration and security configuration best practices.
• Experience with identity and access management, MFA, and conditional access policies (Microsoft Entra ID experience strongly preferred).
• Understanding of endpoint protection technologies, patch management, and encryption.
• Experience investigating and remediating security incidents, and documenting the investigation.
• Strong communication skills and ability to work across technical and non‑technical teams.
• Hands‑on experience with MDM solutions (e.g. Microsoft Intune, JAMF, Kandji) for device enrollment, configuration, and compliance management.

Responsibilities

• Configure and maintain security settings for critical SaaS applications, including identity, collaboration, productivity, and business operations platforms.
• Manage and enforce mobile device management policies for company‑owned and BYOD devices, including compliance policies that gate access to controlled data.
• Oversee endpoint security for Windows, macOS, and mobile devices, including patching, encryption, and threat protection.
• Implement and maintain secure authentication and access control policies, including MFA and conditional access aligned to NIST technical controls.
• Conduct regular security reviews of SaaS configurations and device compliance reports.
• Monitor for security incidents across endpoints, mobile devices, and SaaS applications; investigate, remediate, and document per incident response procedures.
• Maintain documentation of security controls, policies, and incident response procedures.
• Collaborate with IT and organizational stakeholders to design security protocols that empower business operations and productivity.
• Support System Security Plan (SSP) development by documenting how controls are implemented in systems you own.

Skills

IT security expertise

Endpoint management

SaaS security administration

Identity and access management

MDM (Intune JAMF Kandji)

Incident investigation & remediation

Strong communication

Tools

PowerShell

Python

Job description

About Pacific Fusion

Pacific Fusion was founded in 2023 with the mission to power the world with abundant, affordable, clean energy. We are rapidly designing and building a pulser‑driven inertial fusion system to achieve net facility gain (more fusion energy output than stored energy input). In parallel, we are developing the key components required to build affordable fusion systems. Our plans are ambitious. We have raised over $900M so far from incredible investors, resourcing us to deliver on these plans. We are bringing together the best scientists, engineers, and operators from the fusion community, hard tech industry, and other sectors. We are united by a shared sense of urgency to provide clean power for the world, particularly managing climate change while meeting growing global energy demand. You can read more about us in this letter from our founders.

Why This Role Matters

The Senior Security Engineer will implement, monitor, and maintain security controls across Pacific Fusion's information technology systems, spanning corporate IT, cloud infrastructure, and SaaS applications. This role ensures critical business applications are securely configured, security policies are enforced, and both company‑owned and BYOD devices meet security and compliance requirements. Working closely with IT, operations, and business application owners, the Senior Security Engineer will design access controls, oversee security configuration baselines, respond to security incidents, and produce the evidence and documentation underpinning our compliance program. This is a builder role in a growing hybrid environment of SaaS services, on‑premise systems, and diverse endpoints across multiple sites.

What You'll Do

• Configure and maintain security settings for critical SaaS applications, including identity, collaboration, productivity, and business operations platforms.
• Manage and enforce mobile device management policies for company‑owned and BYOD devices, including compliance policies that gate access to controlled data.
• Oversee endpoint security for Windows, macOS, and mobile devices, including patching, encryption, and threat protection.
• Implement and maintain secure authentication and access control policies, including MFA and conditional access aligned to NIST technical controls.
• Conduct regular security reviews of SaaS configurations and device compliance reports.
• Monitor for security incidents across endpoints, mobile devices, and SaaS applications; investigate, remediate, and document per incident response procedures.
• Maintain documentation of security controls, policies, and incident response procedures.
• Collaborate with IT and organizational stakeholders to design security protocols that empower business operations and productivity.
• Support System Security Plan (SSP) development by documenting how controls are implemented in systems you own.

What You Bring

• 5+ years of experience in IT security, endpoint management, or related fields.
• Strong knowledge of SaaS application administration and security configuration best practices.
• Experience with identity and access management, MFA, and conditional access policies (Microsoft Entra ID experience strongly preferred).
• Understanding of endpoint protection technologies, patch management, and encryption.
• Experience investigating and remediating security incidents, and documenting the investigation.
• Strong communication skills and ability to work across technical and non‑technical teams.
• Hands‑on experience with MDM solutions (e.g. Microsoft Intune, JAMF, Kandji) for device enrollment, configuration, and compliance management.

Bonus Points For

• Experience with security assessments and compliance frameworks (e.g. NIST 800‑171, CMMC L2, SOC 2, ISO 27001). Experience producing audit evidence for compliance frameworks or cyber insurance assessments.
• Experience with SIEM tools or centralized logging platforms.
• Scripting or automation experience (PowerShell, Python).
• Relevant certifications (Security+, CISSP, Microsoft Security Operations Analyst, CMMC‑related credentials such as CCP).

Pay Range

$110,000—$130,000 USD

Total Compensation & Benefits For Eligible Employees

• Industry‑competitive salary
• Equity plan
• 6% employer 401(k) matching
• Generous paid time off (including sick leave, vacation, paid family leave)
• Medical, Dental, and Vision insurance

Actual base salary offered will be determined by experience, skills, and work location. This range is for base salary; our total compensation includes equity and benefits. We welcome you to apply even if your expectations are outside our listed range.

Pacific Fusion is committed to creating a diverse environment and is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Pacific Fusion is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures and throughout employment. If you need assistance or any accommodation, please let us know.

Pacific Fusion does not accept unsolicited resumes from recruiters or employment agencies without a fully executed recruitment agreement in place. In the absence of such agreement, Pacific Fusion reserves the right to pursue and hire any candidates without an obligation to pay fees. Agencies are requested not to contact Pacific Fusion hiring managers or employees regarding recruiting services.