Security Engineer, Security Operations and Governance

Meitner Energy is developing advanced nuclear energy solutions intended to deliver reliable, scalable, and carbon-free electricity for industrial and grid applications.

Our international team brings together nuclear, engineering, commercial, regulatory, and project-development experience. We are building an organization focused on disciplined engineering, responsible execution, and the deployment of nuclear energy at meaningful scale.

The Opportunity

Meitner operates a private AI platform that handles export-controlled nuclear technology, sensitive engineering material, and regulatory data spanning multiple jurisdictions. This role owns the security and compliance posture of that platform: the access controls, audit trails, data-loss prevention, and control mappings that allow engineers and operators to use AI safely on controlled material. It is a security engineering position with genuine governance responsibility, where the controls you implement are the same controls you will be asked to evidence.

You will also provide security engineering depth to the corporate IT security program, coordinating with the Director of Global IT and external security monitoring partners on shared standards. The primary focus is the regulated platform, and the corporate dimension is real but bounded.

This role is ideal for someone who:

• Understands that security controls matter only if they hold up to assessment, and builds evidence along the way rather than reconstructing it afterward.
• Can translate regulatory requirements into concrete engineering tasks without losing either the technical or the compliance thread.
• Is interested in security challenges specific to AI systems, including prompt injection, model access control, and inference audit, alongside traditional infrastructure security.
• Wants to hold the security authority for a platform and shape its posture from the beginning.

What You'll Do

Platform Security Engineering

Implement and maintain single sign-on and multi-factor authentication, role-based and attribute-based access control, and document-level access controls across the platform, ensuring that access aligns with data-sensitivity tiers and export-control requirements. You will deploy and operate data-loss prevention controls, immutable audit logging, and secrets management for the platform environment, and own vulnerability management for platform components including scanning cadence, triage, remediation tracking, and reporting.

You will also run prompt-injection testing against the platform and own incident response procedures specific to AI systems, including playbooks for model misuse and data-exfiltration scenarios.

Export Control and Compliance

Own access enforcement for export-controlled material on the platform, ensuring controls are implemented, documented, and demonstrably effective rather than merely specified. You will build and maintain the control mapping and evidence library for the platform against the applicable federal information-protection standards, producing audit-ready artifacts suitable for presentation to regulators and external assessors, and coordinate with the AI Platform Lead and legal and compliance stakeholders on authorization design and ongoing compliance posture.

Corporate Security Coordination

Define and maintain corporate security standards in coordination with the Director of Global IT, ensuring the platform security posture is consistent with company-wide policy. You will manage the day-to-day working relationship with external security monitoring partners, covering alert triage, escalation, tuning, and regular reporting, and support security awareness and policy communication across the company’s sites.

What We're Looking For

Required Qualifications

• Bachelor’s degree in computer science, information security, engineering, or a related discipline, or equivalent professional experience.
• 4+ years of professional experience in security engineering, security operations, or a combined security and governance role.
• Hands-on experience implementing single sign-on and multi-factor authentication, role-based and attribute-based access control, privileged access management, and secrets management in production environments, with the ability to configure these controls personally.
• Working knowledge of federal information-protection control frameworks and their evidence requirements, including experience producing control mappings that survived an audit or assessment.
• Experience with security information and event management or managed detection tooling, including alert triage and management of an external monitoring relationship.
• Understanding of export-control frameworks and controlled unclassified information handling requirements, gained in an environment