Job
- Level
- Senior
- Location
- Munich
- Working Model
- Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will implement security measures, manage incident response, enforce Zero Trust within the infrastructure, and actively enhance cloud and container security.
Job Technologies
Your role in the team
- As our Senior Security Engineer in Munich, you will own security implementation and security monitoring, digital and physical, for a company building one of the most valuable bodies of fusion IP in Europe. Protecting it is its own challenge, and you are the person who will own it.
- Build out our security monitoring capability: select and run the SIEM, decide what's worth alerting on, and tune out the noise.
- Own incident response end-to-end, from investigation through to a post-mortem and a fix that holds.
- Harden the environment hands-on across endpoint and EDR, identity and access, network, and infrastructure.
- Finish maturing Zero Trust: identity and device posture as joint conditions for access, and MFA everywhere.
- Handle the long tail of edge cases that comes with a fast-growing team and a lot of contractors.
- Secure our Google-centric workplace, where most of our IP moves - DLP, data classification and labeling, retention, and context-aware access.
- Secure the software supply chain in collaboration with our platform team: source control, access boundaries, secrets, and CI/CD.
- Run vulnerability and attack surface management, and drive remediation to be done with the teams that own the systems.
- Set and monitor our physical security standards with Business Operations, who implement them on site: access zones, CCTV and alerting, visitor and contractor access, and site access as a unified joiner-mover-leaver process with digital access across multiple locations.
- Give our compliance work the technical substance it needs: evidence, remediation, and support through audits and pen tests.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- You have built or substantially operated a SIEM, and run real incidents end-to-end.
- You have implemented Zero Trust in production - unified IdP and MDM, conditional access, device posture.
- You are well-versed in Google Workspace Enterprise security or can quickly get there from an equivalent platform.
- You are automation-first: Terraform, and scripting in Python, Bash, or PowerShell are no strangers to you.
- You are fluent in CIS Benchmarks, NIST, ISO 27001, and NIS2 without being ruled by them.
- You can turn a technical finding into a business impact and actionable solutions.
- Interest or a track record in AI security.
- Hands-on cloud and container security: GCP, containers, Kubernetes.
- Zertifizierungen wie CISSP, GCIA, GCIH, CCSP oder Google Cloud Professional Cloud Security Engineer.
Experience
- You have 5+ years hands-on in security engineering, with real depth in identity, endpoint, and infrastructure.
- Experience in a regulated, export-controlled, or high-security environment, where physical and digital security meet.
This text has been machine translated. Show original
What we offer
- This role sits at L2/L3 of our framework, please inquire during the recruitment process for further information.
This text has been machine translated. Show original
Topics You Will Work On
Job Locations
About Your Employer
Proxima Fusion
Proxima Fusion GmbH, founded in 2023 in Munich, focuses on the development of the world's first commercial fusion power plant. The company employs innovative stellarator technology and modern methods such as machine learning to create market-ready fusion facilities by the early 2030s. As a spin-off of the Max Planck Institute for Plasma Physics, Proxima Fusion benefits from a strong connection to the European research landscape.
Description
- Company Type
- Startup
- Working Model
- Hybrid, Onsite
- Industry
- Power Sector, Economy
Senior Security Engineer
- Location
- Munich
- Working Model
- Onsite
- Diversity
- Open for all genders
- English Only
- English only required
