{"id":2725366,"url":"https://alion.io/job/kaluza-appsec-staff-engineer","title":"AppSec Staff Engineer","company":{"id":51455,"name":"Kaluza","domain":"kaluza.com","url":"https://alion.io/company/kaluza","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":79,"open_postings":6,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Bristol, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":105600,"max":132000,"currency":"GBP","period":"year","gross":null,"usd_annual":176107},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Okta","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-16T14:23:39Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-17T17:15:48Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Location: Bristol, UK (hybrid, three days a week in the office)\nLevel: Staff Engineer (TL2)\nTeam: Security Engineering, within the Cyber Security squad\nSalary: £105,600 - £132,000 + discretionary bonus\nContract: Permanent\nReporting to: Senior Software Engineering Manager\nPlease note: This role requires an existing right to work in the UK. We can’t offer visa sponsorship, but we review sponsorship role by role, so keep an eye on our careers site for future opportunities.\n\nAbout Kaluza\nKaluza is the Energy Intelligence Platform, turning energy complexity into seamless coordination. We help energy companies overcome today’s challenges while accelerating the shift to a clean, electrified future.\nOur platform orchestrates millions of real-time decisions across homes, devices, markets and grids. By combining predictive algorithms with human-centred design, Kaluza makes clean energy dependable, affordable and adaptive to everyday life.\nWith teams across Europe, Asia and Australia, and a joint venture with Mitsubishi Corporation in Japan, we power leading companies including OVO, AGL and ENGIE, as well as innovators like Volvo and Volkswagen.\n\nWhat you’ll do\nYou’ll join the Security Engineering team, working alongside our cyber security leadership, architecture team and technical leaders across engineering. Our mission is to equip teams to build and innovate while upholding security best practice and protecting client data in the highly regulated energy sector.\nIntegrate security tooling and use AI to prevent, detect and respond to emerging threats\nWork with senior technical leadership to shape our technical strategy and solutions architecture, so security, risk and compliance feed into technical decisions\nHelp product teams deliver secure systems quickly by building a strong security culture through mentoring, design reviews and training\nGive product and engineering teams practical guidance on identifying, prioritising and mitigating systemic risks and vulnerabilities\nLead the evolution of our security best practice across application development and the wider SDLC, supporting teams with expert advice and automation\nInfluence technical and non-technical stakeholders across Kaluza and client teams\nMentor and coach security and software engineers to balance risk with speed and quality\nBuild relationships with third-party security vendors and industry bodies to keep us at the forefront of emerging practices, tooling and standards\n\nWhat you’ll bring\nIdeally, you’ll have:\nExtensive experience mentoring engineers and collaborating closely (e.g. pairing, swarming)\nDeep understanding of software security flaws and web application security best practice (OWASP Top 10, CWE/SANS Top 25)\nExtensive knowledge of CI/CD and DevOps principles, and their security considerations\nExperience applying AI in your own work and helping others build it safely into how they develop\nScripting skills and first-hand experience of software development at scale\nWorking knowledge of Okta or equivalent, to enable workforce identity and enforce access management policies\nAwareness of AWS and/or GCP security best practice, and some experience with infrastructure as code (e.g. Terraform)\nExperience applying architectural and software design patterns in a complex environment\nYou’ll also be:\nA pragmatic, risk-based decision-maker who weighs the technical and commercial consequences of your choices\nSkilled at influencing upwards and outwards, with great communication skills\nAble to set a clear vision for large-scale technical direction and align multiple teams behind it\nKeen to drive compliance and NFR improvements that balance information security and commercial goals\nCommitted to a culture of learning and improvement, and willing to challenge engineering leadership to support it\nSkills (SFIA): We use the SFIA framework to assess and develop our security engineers. Levels run from 1 to 7.\nEssential:\nLevel 6: Systems design\nLevel 5: Information security, specialist advice, systems development lifecycle, solution architecture, emerging technology monitoring\nLevel 4: Information assurance, information and data compliance\nDesirable: Identity and access management (Level 5), software development (Level 6), learning delivery (Level 3), and information assurance stepping up to Level 5\n\nOur values\nFive values guide how we work at Kaluza:\nPlay to win: Collective pride in decarbonising energy at scale.\nSolve the real problem: Cutting through complexity to focus on real-world outcomes.\nBuild trust every day: Consistency, transparency and doing what we say.\nOwn the outcome: Full accountability, wins and setbacks, without ego.\nGo further together: Collaboration, respect and different perspectives.\n\nOur perks\nTime off and family: 26 days’ holiday [plus/including bank holidays], plus 26 weeks’ full pay for new parents with no qualifying service period\nHealth and security: Private medical insurance with virtual GP, life assurance, pension scheme, free mortgage advice and eye tests\nPay and flexibility: Discretionary bonus, a Flex Fund of 5% [of salary] to spend on the benefits you want most, retail discounts through Perks at Work\nGrowth and setup: Personal learning budget, home office budget\nClimate: Furthr, our climate action app\n\nCome as you are\nWe want to meet people from all walks of life. The more inclusive we are, the better our work will be, and we recognise talent on merit and potential. If you’re excited about the role but don’t tick every box, we’d still love to hear from you. If you need any adjustments during the process, just let us know.\nFind out more on our careers page and LinkedIn, or read our Applicant Data Protection Policy.","description_format":"text","description_chars":5688,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance","Home office"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Billing & Subscription Management","Smart Grid","Energy Management"],"lifecycle":[{"event":"open","at":"2026-10-16T16:12:34Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-10-17T06:21:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":176107,"is_top_pay":false},"html_url":"https://alion.io/job/kaluza-appsec-staff-engineer","json_url":"https://alion.io/job/kaluza-appsec-staff-engineer.json","meta":{"generated_at":"2026-10-17T20:19:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4056,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51455},"rest":"https://alion.io/mcp/rest/get_company?id=51455"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkaluza-appsec-staff-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkaluza-appsec-staff-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkaluza-appsec-staff-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kaluza-appsec-staff-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkaluza-appsec-staff-engineer"}]}