Senior Security Engineer

Role: Senior Security Engineer Location:  London, Bristol, Edinburgh Level: TL1 Team: Platform & Security Contract: Permanent This role is based in the UK and requires existing right to work in the UK. At this time, we are not able to offer visa sponsorship for this role. We are committed to building a diverse, global team and our sponsorship policy is evaluated on a role-by-role basis. We encourage you to keep an eye on our careers site to stay informed about future opportunities where we are able to offer visa sponsorship. Kaluza Overview Kaluza is the Energy Intelligence Platform, turning energy complexity into seamless coordination. We help energy companies overcome today’s challenges while accelerating the shift to a clean, electrified future. Our platform orchestrates millions of real-time decisions across homes, devices, markets and grids. By combining predictive algorithms with human-centred design, Kaluza makes clean energy dependable, affordable and adaptive to everyday life. With teams across Europe, North America, Asia and Australia, and a joint venture with Mitsubishi Corporation in Japan, we power leading companies including OVO, AGL and ENGIE, as well as innovators like Volvo and Volkswagen. Where in the world of Kaluza will I be working?   You’ll be joining the Security Engineering team, which sits within the Cyber Security squad in the Kaluza technology community, working alongside our security operations team as well as the wider Kaluza software and platform engineering teams. Our mission is to equip teams with the necessary tools and guidance to build and innovate whilst upholding security best practices and safeguarding our clients’ data. What will I be doing?   • Integrating security platforms and tooling as well as harnessing AI to proactively prevent, accurately detect, and effectively respond to emerging security threats • Partnering with Platform Engineering and IAM teams to embed Zero Trust architecture and ensure the implementation of strong privileged access management (PAM) controls • Empowering Kaluza’s product teams to rapidly deliver secure systems by cultivating a strong, collaborative security culture • Delivering actionable guidance to product and engineering teams on identifying, prioritizing, and mitigating systemic risks and vulnerabilities • Be responsible for defining and evolving security best practices for our systems, and for helping teams to apply these with expert advice and automation • Working closely with release engineering to embed security tooling into the Kaluza release process, ensuring that vulnerabilities are detected and prevented early in the development lifecycle • This is a varied role where you’ll be exposed to the full stack and will work across technologies including AWS, Cloudflare, Okta, Datadog, Crowdstrike and Kubernetes. You’ll be focusing on projects spanning infrastructure, release engineering and security detection What you will have   • Knowledge of AWS and/or GCP security best practices • Knowledge of Kubernetes security best practices • Extensive experience working with infrastructure-as-code (e.g., terraform) • Experience managing web application firewalls (e.g., Cloudflare) • Awareness of common software security flaws and web application security best practices (OWASP top 10, CWE/SANS Top 25) • Knowledge of CI/CD and DevOps principles and security considerations • Experience of applying AI to your own work and/or enabling others • Working knowledge of Okta or equivalent , for workforce identity and enforce access management policies • Some scripting experience ( Python, Go ) • Experience of providing consultancy to other engineering teams, such as reviewing technical designs and facilitating threat modelling Communication, quality & d