Application Security Engineer, Kaluza
£63-93k
+ Discretionary Bonus Scheme
More information about location
1+ day a week in office
Intelligent software platform powering the future of energy
Posted today
Intelligent software platform powering the future of energy
501-1000 employees
Posted today
£63-93k
+ Discretionary Bonus Scheme
More information about location
1+ day a week in office
501-1000 employees
Company mission
To help decarbonise the world.
Role
Who you are
- Deep Security Knowledge: Strong familiarity with the OWASP Top 10, API Security (REST/GraphQL), and secure SDLC practices
- Developer Mindset: You are comfortable working with modern languages - specifically TypeScript & Go - and understand how to secure cloud-native environments
- Automation Experience: You have implemented security tools within CI/CD pipelines (e.g., GitHub Actions) and prefer automation over manual checklists
- Consultative Approach: You can explain complex security risks to non-security stakeholders and guide teams toward pragmatic, scalable solutions
- AI Curiosity: You are interested in both the security risks and the defensive opportunities provided by GenAI
- We understand some people may not apply for jobs unless they tick every box. But if you're excited about joining us and think you have some of what we're looking for, even if you're not 100% sure, we'd still love to hear from you
What the job involves
- Reporting To: Security Engineering Manager
- You’ll be joining the Information & Cyber Security team, which is a core part of our Platform & Security Engineering organisation
- Security at Kaluza isn't a silo; you’ll work alongside specialists across identity and access management, cloud security, security operations, and security architecture
- Beyond the security team, you’ll be closely aligned with our colleagues in SRE, Platform Engineering, and Developer Experience
- Our goal is to make the "secure path" the easiest path for our developers
- As we shift toward becoming an AI-enabled development team, you will lead the way in ensuring tools like Claude and GitHub Copilot are used safely, while having the autonomy to experiment with AI to automate vulnerability triage and remediation
- AI-Driven Security: Helping our engineers safely adopt AI tools and experimenting with AI to automate the "heavy lifting" of security, such as automated remediation and risk assessment
- Automated Security Scanning: Implementing and tuning SAST/DAST/SCA tools across the SDLC. You’ll focus on increasing fidelity and reducing noise, ensuring security data flows into engineering workflows to maintain developer "flow state."
- Vulnerability Management: Embedding modern vulnerability management practices within engineering teams. You’ll consult on triage and leverage AI tools to accelerate detection, risk assessment, and remediation
- Secure Design & Threat Modeling: Partnering with architects, product managers, and engineers to incorporate security early. You’ll lead Threat Modeling sessions and develop secure-by-design principles to guide design thinking
- Supply Chain Security: Developing robust standards and tooling to safeguard our software against open-source dependency threats and supply chain attacks
- Security Culture & Champions: Partnering with our Security Champions throughout Kaluza to promote a security-first culture and increase engagement across the technology community
Our take
The energy landscape is one of the most dynamic and fast-evolving sectors in the world. More and more energy retailers are looking to move further toward digitisation and reap the benefits of modern technology in an increasingly connected world. But many are struggling with the transition, held back by legacy operating systems which slow them down, drain resources, and hamper innovation.
This is where Kaluza comes in. An ecosystem of platforms whose services range from energy billing to smart electric vehicle charging, Its real-time cloud platforms transform supplier operations, reducing the cost to serve and boosting customer engagement. Essentially, its platform is aimed at helping businesses streamline their operations, saving them time, effort, and money which can be better invested elsewhere.
Kaluza is riding the momentum of a growing desire for sustainable business and services. Its program relating to electric car charging, for example, will be able to capitalise on huge new demand in that sector - over 100,000 electric cars are already on the roads in the UK, and Bloomberg New Energy Finance has predicted that electric cars will account for over 50% of new global car sales by 2040. As the globe moves further towards sustainable use of energy in the coming years, Kaluza could be very well positioned to capitalise.
Freddie
Company Specialist at Welcome to the Jungle
Insights
33% employee growth in 12 months
Company
Funding (1 round)
Jun 2024
$100m
LATE VC
Total funding: $100m
Company benefits
- Progressive leave policies - including leave dedicated to the moments that matter to you the most
- Annual discretionary bonus
- Dedicated personal learning and home office budgets
- Flexible working — we trust you to work in a way that suits your lifestyle
- 26 days holiday
- Kaluza Share Scheme
Company HQ
Kensington, London, UK
Articles
Leadership
Melissa Gander
(CEO)Initially joined Kaluza as COO before becoming CEO in 2024. Previously worked at OVO Energy in a number of roles, including Managing Director of Smart Metering and Group COO. Prior to that, they worked at INEXUS as a Process and Performance Analyst and a Customer Manager.
People progressing
Joined as Senior Technical Product Manager in 2017, promoted after 2 years to Head of Product, promoted again in 2024 to their current position as Director of Product.
Joined Kaluza in 2020 as a Software Engineer, and in less than 2 years was promoted to Software Engineering Manager and again promoted in 2023 to Senior Software Engineer.
Diversity, Equity & Inclusion at Kaluza
- We are developing an dedicated Early Talent programme with a focus on underrepresented groups, offering different training opportunities within the business
- Our applicant tracking system, Greenhouse, also anonymously tracks the diversity of each candidate pipeline, so we can proactively take action when a pipeline needs to be more diverse
- We invest in tools, like Textio, and focused diversity job boards to help us reduce bias in our job postings and recruitment activity
- Commitment in improving diversity across our Tech Teams and working with companies to improve the tech ecosystem as a whole, specifically have committed to 25% Women in Tech by 2025
- We've signed up to numerous charters, like the Tech Talent Charter, Race at Work Charter and Trans in the City, to show our continuing commitment to improving I&D within Kaluza and the wider community
- Within Kaluza we have belonging communities set up, to offer support and forums for everybody
- We run monthly Inclusive Hiring Skills & Bias training that are open to all Kaluza employees
Share this job
View 29 more jobs at Kaluza