Role: Senior Security Engineer

Location: London, Bristol, Edinburgh

Level: TL1

Team: Platform & Security

Contract: Permanent

This role is based in the UK and requires existing right to work in the UK.

At this time, we are not able to offer visa sponsorship for this role. We are committed to building a diverse, global team and our sponsorship policy is evaluated on a role-by-role basis. We encourage you to keep an eye on our careers site to stay informed about future opportunities where we are able to offer visa sponsorship.

Kaluza Overview

Kaluza is the Energy Intelligence Platform, turning energy complexity into seamless coordination. We help energy companies overcome today’s challenges while accelerating the shift to a clean, electrified future.

Our platform orchestrates millions of real-time decisions across homes, devices, markets and grids. By combining predictive algorithms with human-centred design, Kaluza makes clean energy dependable, affordable and adaptive to everyday life.

With teams across Europe, North America, Asia and Australia, and a joint venture with Mitsubishi Corporation in Japan, we power leading companies including OVO, AGL and ENGIE, as well as innovators like Volvo and Volkswagen.

Where in the world of Kaluza will I be working?

You’ll be joining the Security Engineering team, which sits within the Cyber Security squad in the Kaluza technology community, working alongside our security operations team as well as the wider Kaluza software and platform engineering teams. Our mission is to equip teams with the necessary tools and guidance to build and innovate whilst upholding security best practices and safeguarding our clients’ data.

What will I be doing?

Integrating security platforms and tooling as well as harnessing AI to proactively prevent, accurately detect, and effectively respond to emerging security threats

Partnering with Platform Engineering and IAM teams to embed Zero Trust architecture and ensure the implementation of strong privileged access management (PAM) controls

Empowering Kaluza’s product teams to rapidly deliver secure systems by cultivating a strong, collaborative security culture

Delivering actionable guidance to product and engineering teams on identifying, prioritizing, and mitigating systemic risks and vulnerabilities

Be responsible for defining and evolving security best practices for our systems, and for helping teams to apply these with expert advice and automation

Working closely with release engineering to embed security tooling into the Kaluza release process, ensuring that vulnerabilities are detected and prevented early in the development lifecycle

This is a varied role where you’ll be exposed to the full stack and will work across technologies including AWS, Cloudflare, Okta, Datadog, Crowdstrike and Kubernetes. You’ll be focusing on projects spanning infrastructure, release engineering and security detection

What you will have

Knowledge of AWS and/or GCP security best practices

Knowledge of Kubernetes security best practices

Extensive experience working with infrastructure-as-code (e.g., terraform)

Experience managing web application firewalls (e.g., Cloudflare)

Awareness of common software security flaws and web application security best practices (OWASP top 10, CWE/SANS Top 25)

Knowledge of CI/CD and DevOps principles and security considerations

Experience of applying AI to your own work and/or enabling others

Working knowledge of Okta or equivalent, for workforce identity and enforce access management policies

Some scripting experience (Python, Go)

Experience of providing consultancy to other engineering teams, such as reviewing technical designs and facilitating threat modelling

Communication, quality & delivery

You’ll be…

Skilled at identifying gaps in requirements and contribute to the planning process

Able to demonstrate factoring in cost, industry standards and understanding of your organisation when making technical decisions

Experienced at coaching and/or mentoring other engineers

Proficient at quickly understanding problem areas and, through collaboration, forming a strategy to resolve issues