Application Security Staff Engineer, Kaluza
£105.6-132k
+ Discretionary bonus
More information about location
3 days a week in office
Intelligent software platform powering the future of energy
Be an early applicant
Intelligent software platform powering the future of energy
501-1000 employees
Be an early applicant
£105.6-132k
+ Discretionary bonus
More information about location
3 days a week in office
501-1000 employees
Company mission
To help decarbonise the world.
Role
Who you are
- Extensive experience mentoring engineers and collaborating closely (e.g. pairing, swarming)
- Deep understanding of software security flaws and web application security best practice (OWASP Top 10, CWE/SANS Top 25)
- Extensive knowledge of CI/CD and DevOps principles, and their security considerations
- Experience applying AI in your own work and helping others build it safely into how they develop
- Scripting skills and first-hand experience of software development at scale
- Working knowledge of Okta or equivalent, to enable workforce identity and enforce access management policies
- Awareness of AWS and/or GCP security best practice, and some experience with infrastructure as code (e.g. Terraform)
- Experience applying architectural and software design patterns in a complex environment
- A pragmatic, risk-based decision-maker who weighs the technical and commercial consequences of your choices
- Skilled at influencing upwards and outwards, with great communication skills
- Able to set a clear vision for large-scale technical direction and align multiple teams behind it
- Keen to drive compliance and NFR improvements that balance information security and commercial goals
- Committed to a culture of learning and improvement, and willing to challenge engineering leadership to support it
- Skills (SFIA): We use the SFIA framework to assess and develop our security engineers. Levels run from 1 to 7
- Essential:
- Level 6: Systems design
- Level 5: Information security, specialist advice, systems development lifecycle, solution architecture, emerging technology monitoring
- Level 4: Information assurance, information and data compliance
- Desirable: Identity and access management (Level 5), software development (Level 6), learning delivery (Level 3), and information assurance stepping up to Level 5
- If you’re excited about the role but don’t tick every box, we’d still love to hear from you
What the job involves
- Reporting to: Senior Software Engineering Manager
- You’ll join the Security Engineering team, working alongside our cyber security leadership, architecture team and technical leaders across engineering. Our mission is to equip teams to build and innovate while upholding security best practice and protecting client data in the highly regulated energy sector
- Integrate security tooling and use AI to prevent, detect and respond to emerging threats
- Work with senior technical leadership to shape our technical strategy and solutions architecture, so security, risk and compliance feed into technical decisions
- Help product teams deliver secure systems quickly by building a strong security culture through mentoring, design reviews and training
- Give product and engineering teams practical guidance on identifying, prioritising and mitigating systemic risks and vulnerabilities
- Lead the evolution of our security best practice across application development and the wider SDLC, supporting teams with expert advice and automation
- Influence technical and non-technical stakeholders across Kaluza and client teams
- Mentor and coach security and software engineers to balance risk with speed and quality
- Build relationships with third-party security vendors and industry bodies to keep us at the forefront of emerging practices, tooling and standards
Our take
The energy landscape is one of the most dynamic and fast-evolving sectors in the world. More and more energy retailers are looking to move further toward digitisation and reap the benefits of modern technology in an increasingly connected world. But many are struggling with the transition, held back by legacy operating systems which slow them down, drain resources, and hamper innovation.
This is where Kaluza comes in. An ecosystem of platforms whose services range from energy billing to smart electric vehicle charging, Its real-time cloud platforms transform supplier operations, reducing the cost to serve and boosting customer engagement. Essentially, its platform is aimed at helping businesses streamline their operations, saving them time, effort, and money which can be better invested elsewhere.
Kaluza is riding the momentum of a growing desire for sustainable business and services. Its program relating to electric car charging, for example, will be able to capitalise on huge new demand in that sector - over 100,000 electric cars are already on the roads in the UK, and Bloomberg New Energy Finance has predicted that electric cars will account for over 50% of new global car sales by 2040. As the globe moves further towards sustainable use of energy in the coming years, Kaluza could be very well positioned to capitalise.
Freddie
Company Specialist at Welcome to the Jungle
Insights
33% employee growth in 12 months
Company
Funding (1 round)
Jun 2024
$100m
LATE VC
Total funding: $100m
Company benefits
- Progressive leave policies - including leave dedicated to the moments that matter to you the most
- Annual discretionary bonus
- Dedicated personal learning and home office budgets
- Flexible working — we trust you to work in a way that suits your lifestyle
- 26 days holiday
- Kaluza Share Scheme
Company HQ
Kensington, London, UK
Articles
Leadership
Melissa Gander
(CEO)Initially joined Kaluza as COO before becoming CEO in 2024. Previously worked at OVO Energy in a number of roles, including Managing Director of Smart Metering and Group COO. Prior to that, they worked at INEXUS as a Process and Performance Analyst and a Customer Manager.
People progressing
Joined as Senior Technical Product Manager in 2017, promoted after 2 years to Head of Product, promoted again in 2024 to their current position as Director of Product.
Joined Kaluza in 2020 as a Software Engineer, and in less than 2 years was promoted to Software Engineering Manager and again promoted in 2023 to Senior Software Engineer.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Diversity, Equity & Inclusion at Kaluza
- We are developing an dedicated Early Talent programme with a focus on underrepresented groups, offering different training opportunities within the business
- Our applicant tracking system, Greenhouse, also anonymously tracks the diversity of each candidate pipeline, so we can proactively take action when a pipeline needs to be more diverse
- We invest in tools, like Textio, and focused diversity job boards to help us reduce bias in our job postings and recruitment activity
- Commitment in improving diversity across our Tech Teams and working with companies to improve the tech ecosystem as a whole, specifically have committed to 25% Women in Tech by 2025
- We've signed up to numerous charters, like the Tech Talent Charter, Race at Work Charter and Trans in the City, to show our continuing commitment to improving I&D within Kaluza and the wider community
- Within Kaluza we have belonging communities set up, to offer support and forums for everybody
- We run monthly Inclusive Hiring Skills & Bias training that are open to all Kaluza employees
Share this job
View 26 more jobs at Kaluza