Senior Security Engineer

Academic Key; West of England; Hybrid; GBP 90,000 - 140,000; Full time

Benefits offered by this job

26 days holiday

Private medical insurance

Job summary

Kaluza, the Energy Intelligence Platform, is seeking a Senior Security Engineer to join the Security Engineering team in the UK. You will integrate security platforms, apply AI to detect threats, and help embed Zero Trust and PAM across our systems.

You will collaborate with Platform Engineering, IAM, and product teams to deliver secure, scalable services while guiding risk mitigation and security best practices throughout the development lifecycle.

Qualifications

• Knowledge of AWS and/or GCP security best practices.
• Knowledge of Kubernetes security best practices.
• Extensive experience with infrastructure-as-code (e.g., Terraform).
• Experience managing web application firewalls (e.g., Cloudflare).
• Awareness of OWASP Top 10 and CWE/SANS Top 25 security flaws.
• Knowledge of CI/CD and DevOps security considerations.
• Experience applying AI to their own work or enabling others.
• Working knowledge of Okta for workforce identity and access management.
• Some scripting experience (Python, Go).
• Experience advising engineers on designs and threat modelling.

Responsibilities

• Integrating security platforms and tooling and using AI to detect and respond to threats.
• Partnering with Platform Engineering and IAM to embed Zero Trust and PAM controls.
• Empowering product teams to deliver secure systems by fostering a security culture.
• Providing actionable guidance to identify, prioritize, and mitigate systemic risks.
• Defining and evolving security best practices and enabling automation.
• Collaborating with release engineering to embed security tooling early in the lifecycle.

Skills

AWS security

GCP security

Kubernetes security

CI/CD security

Python/Go scripting

Threat modelling

AI in security

Okta identity

Identity management

Consultancy to eng teams

Tools

Terraform

Cloudflare

Okta

Job description

Senior Security Engineer

Role: Senior Security Engineer Location: London, Bristol, Edinburgh Level: TL1 Team: Platform & Security Contract: Permanent This role is based in the UK and requires existing right to work in the UK. At this time, we are not able to offer visa sponsorship for this role. We are committed to building a diverse, global team and our sponsorship policy is evaluated on a role-by-role basis. We encourage you to keep an eye on our careers site to stay informed about future opportunities where we are able to offer visa sponsorship. Kaluza Overview Kaluza is the Energy Intelligence Platform, turning energy complexity into seamless coordination. We help energy companies overcome today’s challenges while accelerating the shift to a clean, electrified future. Our platform orchestrates millions of real-time decisions across homes, devices, markets and grids. By combining predictive algorithms with human-centred design, Kaluza makes clean energy dependable, affordable and adaptive to everyday life. With teams across Europe, North America, Asia and Australia, and a joint venture with Mitsubishi Corporation in Japan, we power leading companies including OVO, AGL and ENGIE, as well as innovators like Volvo and Volkswagen. Where in the world of Kaluza will I be working? You’ll be joining the Security Engineering team, which sits within the Cyber Security squad in the Kaluza technology community, working alongside our security operations team as well as the wider Kaluza software and platform engineering teams. Our mission is to equip teams with the necessary tools and guidance to build and innovate whilst upholding security best practices and safeguarding our clients’ data.

What will I be doing?

• Integrating security platforms and tooling as well as harnessing AI to proactively prevent, accurately detect, and effectively respond to emerging security threats
• Partnering with Platform Engineering and IAM teams to embed Zero Trust architecture and ensure the implementation of strong privileged access management (PAM) controls
• Empowering Kaluza’s product teams to rapidly deliver secure systems by cultivating a strong, collaborative security culture
• Delivering actionable guidance to product and engineering teams on identifying, prioritizing, and mitigating systemic risks and vulnerabilities
• Be responsible for defining and evolving security best practices for our systems, and for helping teams to apply these with expert advice and automation
• Working closely with release engineering to embed security tooling into the Kaluza release process, ensuring that vulnerabilities are detected and prevented early in the development lifecycle

What you will have

• Knowledge of AWS and/or GCP security best practices
• Knowledge of Kubernetes security best practices
• Extensive experience working with infrastructure-as-code (e.g., terraform)
• Experience managing web application firewalls (e.g., Cloudflare)
• Awareness of common software security flaws and web application security best practices (OWASP top 10, CWE/SANS Top 25)
• Knowledge of CI/CD and DevOps principles and security considerations
• Experience of applying AI to your own work and/or enabling others
• Working knowledge of Okta or equivalent , for workforce identity and enforce access management policies
• Some scripting experience ( Python, Go )
• Experience of providing consultancy to other engineering teams, such as reviewing technical designs and facilitating threat modelling

Communication, quality & delivery You’ll be… Skilled at identifying gaps in requirements and contribute to the planning process Able to demonstrate factoring in cost, industry standards and understanding of your organisation when making technical decisions Experienced at coaching and/or mentoring other engineers Proficient at quickly understanding problem areas and, through collaboration, forming a strategy to resolve issues Good at communicating and collaborating effectively with engineers as well as stakeholders Experienced at helping progress technical maturity within a team, working with them to balance strategic delivery with maintenance, innovation and tactical support work

Our Values

• Play to win: Collective pride in decarbonising energy at scale.
• Solve the real problem: Cutting through complexity to focus on real-world outcomes.
• Build trust every day: Consistency, transparency and doing what we say.
• Own the outcome: Full accountability, wins and setbacks, without ego.
• Go further together: Collaboration, respect and different perspectives.

Our Perks

• Time off and family: 26 days’ holiday, plus 26 weeks’ full pay for new parents with no qualifying service period
• Health and security: Private medical insurance with virtual GP,

Academic Key will never request login credentials or application fees for this role.