Security Operations Lead

Location: Bristol or London, UK (hybrid, three days a week in the office) Level: Engineering Manager (PL1) Team: Information & Cyber Security, within Platform & Security Engineering Salary: £70,000 – £87,000 + discretionary bonus Contract: Permanent Reporting to: Head of Information Security Please note: This role requires an existing right to work in the UK . We can’t offer visa sponsorship, but we review sponsorship role by role, so keep an eye on our careers site for future opportunities. About Kaluza Kaluza is the Energy Intelligence Platform, turning energy complexity into seamless coordination. We help energy companies overcome today’s challenges while accelerating the shift to a clean, electrified future. Our platform orchestrates millions of real-time decisions across homes, devices, markets and grids. By combining predictive algorithms with human-centred design, Kaluza makes clean energy dependable, affordable and adaptive to everyday life. With teams across Europe, Asia and Australia, and a joint venture with Mitsubishi Corporation in Japan, we power leading companies including OVO, AGL and ENGIE, as well as innovators like Volvo and Volkswagen. What you’ll do You’ll join the Information & Cyber Security team, a core part of our Platform & Security Engineering organisation. Security at Kaluza isn’t a silo, so you’ll work closely with colleagues across security engineering, identity and access management, platform engineering and enterprise technical services. As Security Operations Lead, you’ll own and grow the Security Operations function, leading a team across the UK and Australia. You’ll be the senior escalation point for security incidents, a calm and authoritative presence under pressure, and the person who keeps our operational security evolving to meet new threats, including those that come with being an AI-enabled business. • Lead the team: Build, mentor and manage the performance of a Security Operations team across the UK and Australia, creating an environment of continuous learning, clear ownership and psychological safety • Evolve incident response: Develop our incident response processes, especially around AI, maintain playbooks and standard operating procedures, and run exercises that build team confidence when it matters most • Hunt threats: Proactively hunt for threats before they become incidents, and work with penetration testers, red teams and bug bounty programmes to find weaknesses, then partner with security engineering and technology teams to close gaps • Own detection and tooling: Own our security monitoring and detection capability, including SIEM, EDR and threat intelligence platforms, driving the tooling roadmap, tuning detections to cut noise, and championing automation • Report on what matters: Define and own Security Operations KPIs and KRIs, and give senior stakeholders clear reporting on the health of the function, including mean time to detect, mean time to respond and coverage trends • Support compliance and governance: Make sure our security operations posture supports our regulatory and contractual obligations, acting as a key stakeholder in audits, assessments and customer security reviews, and working closely with Legal, Compliance and Privacy What you’ll bring Ideally, you’ll have: • Experience managing and mentoring engineers and/or operations specialists • Expertise in incident response, with hands-on experience leading major incidents • Experience in threat intelligence and hunting, proactively seeking threats in complex, cloud-native environments • A good working understanding of adversarial techniques (MITRE ATT&CK and similar frameworks), and how you keep up to date • Genuine curiosity about the security risks introduced by AI systems, such as model abuse,