EU remote
Security Engineer
About this role
WHO WE ARE Proxima Fusion is Europe’s fastest-growing fusion company and the continent’s best-funded fusion player, as well as the first spin-out from the Max Planck Institute for Plasma Physics (IPP). Backed by over €650M and powered by a growing team across Munich, Zurich, and Oxford, we are developing the hardware and infrastructure needed to deliver the world’s first commercial stellarator fusion power plant. Our concept advances the most mature fusion technology out there, the Wendelstein 7-X stellarator, through two next-generation machines: Alpha and Stellaris.
Our work combines stellarator optimization, advanced computation, machine learning, and high-temperature superconducting magnets to unlock higher-performance designs that were previously out of reach. Turning these designs into a functioning fusion power plant requires excellence and ownership across every discipline, from physics and engineering to software, manufacturing, law, and business functions. WHY JOIN US Work on a civilisation-scale problem - Clean, baseload fusion energy is one of the few genuinely world-changing challenges, and every hire directly accelerates the path to a working stellarator.
Grow as fast as the company does - With headcount set to roughly 5x in a few years and major technical milestones ahead on the path to our demo machine and first power plant, your role grows under you; today's hire is tomorrow's function lead. Tackle problems that don't exist elsewhere - Fusion sits at a rare intersection of deep-tech R&D, industrial procurement, government relations, and venture financing, so non-tech functions face challenges no other workplace can offer.
YOUR IMPACT As our Senior Security Engineer in Munich, you will own security implementation and security monitoring, digital and physical, for a company building one of the most valuable bodies of fusion IP in Europe. Protecting it is its own challenge, and you are the person who will own it. WHAT YOU WILL DO • Build out our security monitoring capability: select and run the SIEM, decide what's worth alerting on, and tune out the noise.
• Own incident response end-to-end, from investigation through to a post-mortem and a fix that holds. • Harden the environment hands-on across endpoint and EDR, identity and access, network, and infrastructure. • Finish maturing Zero Trust: identity and device posture as joint conditions for access, and MFA everywhere. • Handle the long tail of edge cases that comes with a fast-growing team and a lot of contractors. • Secure our Google-centric workplace, where most of our IP moves — DLP, data classification and labeling, retention, and context-aware access.