Security Engineer, Security Operations and Governance

Meitner Energy is seeking a Security Engineer to own the security and compliance posture of the company's private AI platform. This is a hands-on security engineering role with a substantial governance workload: the successful candidate will personally implement access controls, audit logging, data-loss prevention, and vulnerability management, and will build the control mappings and evidence library that allow the platform to be assessed.

The position suits a security engineer who configures controls rather than only evaluating them, and who produces audit evidence as part of building rather than as a later exercise.

Meitner operates a private AI platform that handles export-controlled nuclear technology, sensitive engineering material, and regulatory data spanning multiple jurisdictions. This role owns the security and compliance posture of that platform: the access controls, audit trails, data-loss prevention, and control mappings that allow engineers and operators to use AI safely on controlled material. It is a security engineering position with genuine governance responsibility, where the controls you implement are the same controls you will be asked to evidence.

You will also provide security engineering depth to the corporate IT security program, coordinating with the Director of Global IT and external security monitoring partners on shared standards. The primary focus is the regulated platform, and the corporate dimension is real but bounded.

This role is ideal for someone who:

• Understands that security controls matter only if they hold up to assessment, and builds evidence along the way rather than reconstructing it afterward.
• Can translate regulatory requirements into concrete engineering tasks without losing either the technical or the compliance thread.
• Is interested in security challenges specific to AI systems, including prompt injection, model access control, and inference audit, alongside traditional infrastructure security.
• Wants to hold the security authority for a platform and shape its posture from the beginning.

Implement and maintain single sign-on and multi-factor authentication, role-based and attribute-based access control, and document-level access controls across the platform, ensuring that access aligns with data-sensitivity tiers and export-control requirements. You will deploy and operate data-loss prevention controls, immutable audit logging, and secrets management for the platform environment, and own vulnerability management for platform components including scanning cadence, triage, remediation tracking, and reporting.

You will also run prompt-injection testing against the platform and own incident response procedures specific to AI systems, including playbooks for model misuse and data-exfiltration scenarios.

Own access enforcement for export-controlled material on the platform, ensuring controls are implemented, documented, and demonstrably effective rather than merely specified. You will build and maintain the control mapping and evidence library for the platform against the applicable federal information-protection standards, producing audit-ready artifacts suitable for presentation to regulators and external assessors, and coordinate with the AI Platform Lead and legal and compliance stakeholders on authorization design and ongoing compliance posture.

Define and maintain corporate security standards in coordination with the Director of Global IT, ensuring the platform security posture is consistent with company-wide policy. You will manage the day-to-day working relationship with external security monitoring partners, covering alert triage, escalation, tuning, and regular reporting, and support security awareness and policy communication across the company's sites.

• Bachelor's degree in computer science, information security, engineering, or a related discipline, or equivalent professional experience.
• 4+ years of professional experience in security engineering, security operations, or a combined security and governance role.
• Hands-on experience implementing single sign-on and multi-factor authentication, role-based and attribute-based access control, privileged access management, and secrets management in production environments, with the ability to configure these controls personally.
• Working knowledge of federal…