SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Fuse is building fusion energy technology with a mission to accelerate the world's transition to fusion while safeguarding humankind. This is the company's first dedicated Security Engineer role, responsible for owning security across a technically diverse footprint including cloud infrastructure, software development practices, control systems, and data collection pipelines.
You will work alongside an IT Systems Administrator who handles day-to-day device and identity operations. Your primary responsibilities include setting security strategy, defining standards, and implementing technical controls across the organization.
Core responsibilities:
- Own security posture for AWS infrastructure managed via Terraform and Spacelift, including IAM policy review, secrets management, and network segmentation
- Partner with engineering to build security into the SDLC and CI/CD pipeline through code scanning, dependency/vulnerability management, and secure defaults
- Assess and secure control systems and data collection infrastructure
- Own and operate security monitoring and detection tooling; triage alerts and build detection coverage
- Define access-control standards (conditional access, least privilege, MFA policy) in IdP and across SaaS tools
- Define MDM security baselines (macOS/Windows) for IT to implement and maintain
- Build and lead incident response efforts when issues arise
- Track security risk across the environment and lay groundwork for relevant compliance frameworks
- Run periodic security awareness efforts (phishing simulations, training) for the team
This role sits at the intersection of cloud security, DevSecOps, and OT/control-systems security with real ownership from day one. You will be the sole dedicated security resource, setting strategy while partnering with IT for day-to-day enforcement. The company values obsession about details, care, urgency, outcome ownership, and good-faith collaboration.
Note: This role requires ITAR compliance. You must be a U.S. citizen, lawful permanent resident, protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain required authorizations from the U.S. Department of State. The role is based in San Leandro, CA with occasional travel to other Fuse locations.
MINIMUM QUALIFICATIONS:
- 4+ years in a security engineering role spanning cloud security and application/DevSecOps work
- Strong hands-on experience with AWS and Infrastructure-as-Code (Terraform)
- Practical experience with identity security — SSO/IdP policy (Okta or equivalent), conditional access, least-privilege design
- Experience with a security monitoring/detection platform (SIEM, EDR, or specialized tools) — alert triage, tuning, investigation
- Solid understanding of secure SDLC practices — SAST/DAST, dependency scanning, secrets management, code review for security issues
- Strong ability to communicate risk clearly to non-security stakeholders and make pragmatic trade-offs for a small, fast-moving company
PREFERRED QUALIFICATIONS:
- Direct experience securing control systems, OT, or industrial environments
- Experience with CI/CD-integrated IaC workflows (Spacelift or similar)
- Experience with data collection pipeline security (data integrity, sensor/telemetry access controls)
- Prior experience as employee #1 or #2 on a security team, building programs from scratch
- Compliance experience (SOC 2, ISO 27001, NIST, or sector-specific frameworks relevant to hardware/control systems companies)
- Scripting/automation skills (Python, Go) to build custom detections or automate security tooling
- Experience in a company where hardware, CAD/simulation workstations, or physical systems intersect with traditional IT
ADDITIONAL REQUIREMENTS:
- Comfortable being the sole dedicated security resource, setting strategy while partnering with IT for day-to-day enforcement
- Availability for incident response outside standard business hours when needed
- Based in or willing to work from San Leandro, CA office given the control systems and hardware-adjacent scope
- Occasional travel to other Fuse locations
- Willingness to obtain relevant certifications (e.g., AWS Security, GIAC/GSEC) if not already held
