Security Engineer

San Leandro, Californiafull timeOn Site

Apply on Employer Site

mid

H1B: no

Fuse Security Engineer at Fuse owning security across cloud infrastructure, software development, control systems, and data pipelines. Sets security strategy, standards, and technical controls while partnering with IT Systems Administrator on enforcement.

Responsibilities

We're hiring our first dedicated Security Engineer to own security across a growing and technically diverse footprint: cloud infrastructure, software development practices, control systems, and data collection pipelines. You'll work alongside our IT Systems Administrator, who owns day-to-day device/identity operations - you'll set the security strategy, standards, and technical controls, and partner with them on enforcement. This role sits at the intersection of cloud security, DevSecOps, and OT/control-systems security with real ownership from day one.
Obsess about the details — sloppy work costs us later, so do it right the first time.
Care — pick up the trash. Do things no one asks you to do. Go the extra mile because you care.
Act with urgency — every hour matters more than it feels like it does.
Be responsible for the outcome, not just the task; if it is not working, it remains your problem until it is fixed.
Assume good intent — disagree openly, then commit fully once a call is made.
Core Responsibilities
Own security posture for AWS infrastructure managed via Terraform and Spacelift, including IAM policy review, secrets management, and network segmentation.
Partner with engineering to build security into the SDLC and CI/CD pipeline - code scanning, dependency/vulnerability management, secure defaults for new services.
Assess and secure control systems and data collection infrastructure.
Own and operate our security monitoring and detection tooling; triage alerts and build out detection coverage over time.
Define access-control standards (conditional access, least privilege, MFA policy) in IdP and across SaaS tools; partner with IT Admin on enforcement.

Qualification

Compliance experience (SOC 2Scripting/automation skills (PythonExperience in a company where hardwareAdditional Requirements

Required

4+ years in a security engineering role spanning cloud security and application/DevSecOps work.
Strong hands-on experience with AWS and Infrastructure-as-Code (Terraform).
Practical experience with identity security — SSO/IdP policy (Okta or equivalent), conditional access, least-privilege design.
Experience with a security monitoring/detection platform (SIEM, EDR, or specialized tools) — alert triage, tuning, investigation.
Solid understanding of secure SDLC practices — SAST/DAST, dependency scanning, secrets management, code review for security issues.
Strong ability to communicate risk clearly to non-security stakeholders and make pragmatic trade-offs for a small, fast-moving company.

Preferred

Direct experience securing control systems, OT, or industrial environments.
Experience with CI/CD-integrated IaC workflows (Spacelift or similar).
Experience with data collection pipeline security (data integrity, sensor/telemetry access controls).
Prior experience as employee #1 or #2 on a security team, building programs from scratch.
Compliance experience (SOC 2, ISO 27001, NIST, or sector-specific frameworks relevant to hardware/control systems companies).
Scripting/automation skills (Python, Go) to build custom detections or automate security tooling.
Experience in a company where hardware, CAD/simulation workstations, or physical systems intersect with traditional IT.
Additional Requirements