3 hours ago
Bristol, United KingdomStaff+
Responsibilities
- Integrate security tooling and use AI to prevent, detect, and respond to emerging threats.
- Shape technical strategy and solution architecture so security, risk, and compliance inform engineering decisions.
- Support product teams through security guidance, design reviews, mentoring, training, and automation.
- Advise teams on identifying, prioritising, and mitigating systemic risks and vulnerabilities.
- Lead application security best practices across development and the wider software development lifecycle.
- Influence technical and non-technical stakeholders across Kaluza and client teams.
- Mentor and coach security and software engineers while balancing risk, speed, and quality.
- Build relationships with third-party security vendors and industry bodies.
- Set technical direction and improve compliance and non-functional requirements across multiple teams.
Requirements
- Extensive experience mentoring engineers and collaborating through pairing or swarming.
- Deep understanding of software security flaws and web application security best practices, including OWASP Top 10 and CWE/SANS Top 25.
- Extensive knowledge of CI/CD and DevOps principles and their security considerations.
- Experience applying AI in personal work and helping others use it safely in development.
- Scripting skills and first-hand experience of software development at scale.
- Working knowledge of Okta or an equivalent workforce identity and access management solution.
- Awareness of AWS and/or GCP security best practices and experience with infrastructure as code such as Terraform.
- Experience applying architectural and software design patterns in complex environments.
- Ability to make pragmatic, risk-based decisions and influence technical and commercial stakeholders.
- Ability to set large-scale technical direction and align multiple teams behind it.
- Essential SFIA capabilities: Level 6 systems design; Level 5 information security, specialist advice, systems development lifecycle, solution architecture, and emerging technology monitoring; Level 4 information assurance and information and data compliance.
- Desirable SFIA capabilities: Level 5 identity and access management, Level 6 software development, Level 3 learning delivery, and Level 5 information assurance.
Benefits
- Permanent contract based in Bristol with hybrid working and three days per week in the office.
- 26 days of holiday plus or including bank holidays.
- 26 weeks of full pay for new parents with no qualifying service period.
- Private medical insurance with virtual GP, life assurance, pension scheme, mortgage advice, and eye tests.
- Discretionary bonus, a Flex Fund of 5% of salary, and retail discounts through Perks at Work.
- Personal learning budget and home office budget.
- Furthr climate action app.
Tech Stack
Categories
About Kaluza
Kaluza builds an energy software platform for utilities and suppliers to run billing, smart EV charging, and real-time demand response across homes, devices, markets and grids. It sells its platform and services to energy companies and OEM partners; customers include OVO, AGL and ENGIE, with collaborations with Volvo and Volkswagen. Headquartered in London and B Corp‑certified, Kaluza operates across Europe, North America, Asia and Australia, including a joint venture with Mitsubishi in Japan.