Senior Security Engineer

Role: Senior Security Engineer Location: London, Bristol, Edinburgh Level: TL1 Team: Platform & Security Contract: Permanent This role is based in the UK and requires existing right to work in the UK. At this time, we are not able to offer visa sponsorship for this role. We are committed to building a diverse, global team and our sponsorship policy is evaluated on a role-by-role basis. We encourage you to keep an eye on our careers site to stay informed about future opportunities where we are able to offer visa sponsorship.

KALUZA OVERVIEW Kaluza is the Energy Intelligence Platform, turning energy complexity into seamless coordination. We help energy companies overcome today’s challenges while accelerating the shift to a clean, electrified future. Our platform orchestrates millions of real-time decisions across homes, devices, markets and grids. By combining predictive algorithms with human-centred design, Kaluza makes clean energy dependable, affordable and adaptive to everyday life.

With teams across Europe, North America, Asia and Australia, and a joint venture with Mitsubishi Corporation in Japan, we power leading companies including OVO, AGL and ENGIE, as well as innovators like Volvo and Volkswagen. Where in the world of Kaluza will I be working? You’ll be joining the Security Engineering team, which sits within the Cyber Security squad in the Kaluza technology community, working alongside our security operations team as well as the wider Kaluza software and platform engineering teams.

Our mission is to equip teams with the necessary tools and guidance to build and innovate whilst upholding security best practices and safeguarding our clients’ data. What will I be doing? - Integrating security platforms and tooling as well as harnessing AI to proactively prevent, accurately detect, and effectively respond to emerging security threats - Partnering with Platform Engineering and IAM teams to embed Zero Trust architecture and ensure the implementation of strong privileged access management (PAM) controls - Empowering Kaluza’s product teams to rapidly deliver secure systems by cultivating a strong, collaborative security culture - Delivering actionable guidance to product and engineering teams on identifying, prioritizing, and mitigating systemic risks and vulnerabilities - Be responsible for defining and evolving security best practices for our systems, and for helping teams to apply these with expert advice and automation - Working closely with release engineering to embed security tooling into the Kaluza release process, ensuring that vulnerabilities are detected and prevented early in the development lifecycle - This is a varied role where you’ll be exposed to the full stack and will work across technologies including AWS, Cloudflare, Okta, Datadog, Crowdstrike and Kubernetes.

You’ll be focusing on projects spanning infrastructure, release engineering and security detection What you will have - Knowledge of AWS and/or GCP security best practices - Knowledge of Kubernetes security best practices - Extensive experience working with infrastructure-as-code (e.g., terraform) - Experience managing web application firewalls (e.g., Cloudflare) - Awareness of common software security flaws and web application security best practices (OWASP top 10, CWE/SANS Top 25) - Knowledge of CI/CD and DevOps principles and security considerations - Experience of applying AI to your own work and/or enabling others - Working knowledge of Okta or equivalent, for workforce identity and enforce access management policies - Some scripting experience (Python, Go) - Experience of providing consultancy to other engineering teams, such as reviewing technical designs and facilitating threat modelling Communication, quality & delivery You’ll be… - Skilled at identifying gaps in requirements and contribute to the planning process - Able to demonstrate factoring in cost, industry standards and understanding of your organisation when making technical decisions - Experienced at coaching and/or mentoring other engineers - Proficient at quickly understanding problem areas and, through collaboration, forming a strategy to resolve issues - Good at communicating and collaborating effectively with engineers as well as stakeholders - Experienced at helping progress technical maturity within a team, working with them to balance strategic delivery with maintenance, innovation and tactical support work OUR VALUES Five values guide how we work at Kaluza: - Play to win: Collective pride in decarbonising energy at scale. - Solve the real problem: Cutting through complexity to focus on real-world outcomes. - Build trust every day: Consistency, transparency and doing what we say. - Own the outcome: Full accountability, wins and setbacks, without ego. - Go further together: Collaboration, respect and different perspectives.

Our Perks - Time off and family: 26 days’ holiday, plus 26 weeks’ full pay for new parents with no qualifying service period - Health and security: Private medical insurance with virtual GP, life assurance, pension scheme, free mortgage advice and eye tests - Pay and flexibility: Discretionary bonus, a Flex Fund of 5% [of salary] to spend on the benefits you want most, retail discounts through Perks at Work - Growth and setup: Personal learning budget, home office budget - Climate: Furthr, our climate action app COME AS YOU ARE We want to meet people from all walks of life.

The more inclusive we are, the better our work will be, and we recognise talent on merit and potential. If you’re excited about the role but don’t tick every box, we’d still love to hear from you. Find out more on our careers page https://www.kaluza.com/careers/ and LinkedIn https://www.linkedin.com/company/kaluza/. Our Applicant Data Protection Policy is here https://www.kaluza.com/applicant-data-protection-notice/.