Head of Security (fmd)

At 1KOMMA5 we pursue a clear vision: Living on wind and sunlight forever for free. To make this a reality we are building the energy system of the future with Heartbeat AI. Want to be part of it

We bring together regional craftsmanship and scalable software: We dont think of solar batteries heat pumps and e-mobility as isolated components but control them as an intelligent integrated overall system in our virtual power plant. Directly connected to the electricity market in real time fully automated. This way energy is used when it is available from renewables and particularly cost-effective. By 2030 our goal is to transition 1.5 million households to renewable energies. Over 3000 people are working towards this every day at more than 80 locations worldwide from Finland to Australia.

Want to take responsibility and build solutions that truly matter Apply now and help us shape the energy world of tomorrow.

Become a part of our mission and learn about our Product & Tech team!

As Head of Security you are the security owner for Heartbeat AI GmbH the company that builds software for the 1KOMMA5 group. You lead Team Trust our security team inside the Core Platforms domain and you are the person the technology organisation and the wider group turn to on security questions.
What makes this different from most security leadership roles: we dont only protect data centres and laptops. We run connected energy systems in peoples homes and those systems are part of critical energy infrastructure. You protect exactly the infrastructure that drives the transition towards renewable energy.
This is a hands-on leadership role. You build the team and the framework and you stay close enough to the technology to make good calls yourself.

• Leading Team Trust: direction hiring growth health and mentoring.
• Cloud and IoT Security: protect our cloud our applications and the connected hardware in our customers homes.
• Risk and Compliance: own cybersecurity frameworks and the regulations that applies to energy companies.
• Identity and Access Management: internal permissions and secure development that scale with the engineering org.
• Security as a Product: capabilities developers use by default.
• Translating Risk: make security risk concrete for non-technical decision makers up to C-level.

• Google Cloud Platform Vercel
• Auth0
• Wiz
• GitHub Advanced Security
• Terraform / Terramate
• Datadog OpenTelemetry
• Cursor MCP and agentic engineering workflows
• TypeScript Python and GoLang

• Several years of experience in security engineering or security leadership including leading or mentoring engineers.
• A technical background in cloud security preferably Google Cloud Platform with enough depth to reason about infrastructure CI/CD identity and application security.
• Startup agility: you have built a security framework from scratch or close to it with limited initial resources and a clear view of what matters first.
• Regulatory knowledge: you are familiar with cybersecurity frameworks such as NIST CSF and ISO 27001 and ideally with critical infrastructure rules like NIS2 and KRITIS.
• Strong communication skills and the ability to make security risk concrete for engineers product managers and senior business stakeholders.
• A pragmatic outcome-oriented way of working.
• Excellent English communication skills; German is a plus.

• Hands-on coding experience.
• Experience with security in an AI-assisted engineering setup including agentic workflows and their guardrails.
• Experience running or coordinating security incident response.
• Experience with security and IT controls in a company preparing for a public listing.
• Experience in a scale-up environment with roughly 100 to 1000 employees.
• Interest in climate tech and renewable energy.

• You are part of an international dynamic and highly motivated team of people who have proven to make things happen
• With your work you accelerate the energy transition and hence have a direct impact on our climate
• Work with and learn from other super-smart colleagues
• You will enjoy direct contact with core decision-makers
• Flat hierarchies and short decision paths so your work reaches production quickly
• You work remotely (Germany-wide) with a genuinely flexible remote policy and our offices in Hamburg Berlin and Munich are there whenever you want them
• Create a healthy balance alongside your work and enjoy all the benefits of the EGYM Wellpass
• Benefits and discounts are yours with Futurebens
• Whether city bike or e-bike - be flexible with our job bike leasing and do something good for the environment at the same time