AppSec Staff Engineer

Overview

Kaluza is an Energy Intelligence Platform that coordinates millions of real-time decisions across homes, devices, markets and grids, supporting companies such as OVO, AGL and ENGIE as well as Volvo and Volkswagen. It is hiring an AppSec Staff Engineer for its Security Engineering team, part of the Cyber Security squad, in Bristol, United Kingdom. The role is permanent and hybrid, with three days a week in the office, and reports to the Senior Software Engineering Manager.

The team works with cyber security leadership, architecture and technical leaders to help engineers build and innovate while protecting client data in the highly regulated energy sector. The engineer integrates security tooling and uses AI to prevent, detect and respond to threats, helps shape technical strategy and solution architecture, builds a security culture through mentoring, design reviews and training, and gives teams practical guidance on prioritising and reducing systemic risks and vulnerabilities. The role also leads the evolution of security practice across application development and the wider software lifecycle, mentors security and software engineers, and builds relationships with third-party vendors and industry bodies.

Requirements

Kaluza looks for extensive experience mentoring and collaborating with engineers, a deep understanding of software security flaws and web application security practice such as the OWASP Top 10 and CWE/SANS Top 25, and strong knowledge of CI/CD and DevOps security. Experience applying AI in your own work, scripting skills, experience of software development at scale, working knowledge of Okta or similar, awareness of AWS or GCP security practice and infrastructure as code such as Terraform, and use of architectural patterns are also sought. The company wants a pragmatic, risk-based decision-maker who influences well and can align several teams behind a technical direction.

What you get

The salary is 105,600 to 132,000 GBP plus a discretionary bonus. Perks include 26 days holiday, 26 weeks of full pay for new parents with no qualifying service period, private medical insurance with a virtual GP, life assurance, a pension scheme, free mortgage advice and eye tests, a Flex Fund of 5 percent of salary, a learning budget and a home office budget.

Who can apply

The role requires an existing right to work in the UK, and Kaluza cannot offer visa sponsorship for it. Applicants who do not meet every listed criterion are still encouraged to apply.