Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 7 days ago

AppSec Staff Engineer

Kaluza38 open roles

Where
Bristol, England, United Kingdom
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAppSec Staff EngineerKaluza · Bristol, England, United Kingdom

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Kaluza's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. Kaluza postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 7 days ago

Kaluza median: 1 days open

The posting

Location: Bristol, UK (hybrid, three days a week in the office) Level: Staff Engineer (TL2) Team: Security Engineering, within the Cyber Security squad Salary: £105,600 – £132,000 + discretionary bonus Contract: Permanent Reporting to: Senior Software Engineering Manager

Please note: This role requires an existing right to work in the UK. We can’t offer visa sponsorship, but we review sponsorship role by role, so keep an eye on our careers site for future opportunities.

About Kaluza

Kaluza is the Energy Intelligence Platform, turning energy complexity into seamless coordination. We help energy companies overcome today’s challenges while accelerating the shift to a clean, electrified future.

Our platform orchestrates millions of real-time decisions across homes, devices, markets and grids. By combining predictive algorithms with human-centred design, Kaluza makes clean energy dependable, affordable and adaptive to everyday life.

With teams across Europe, Asia and Australia, and a joint venture with Mitsubishi Corporation in Japan, we power leading companies including OVO, AGL and ENGIE, as well as innovators like Volvo and Volkswagen.

What you’ll do

You’ll join the Security Engineering team, working alongside our cyber security leadership, architecture team and technical leaders across engineering. Our mission is to equip teams to build and innovate while upholding security best practice and protecting client data in the highly regulated energy sector.

  • Integrate security tooling and use AI to prevent, detect and respond to emerging threats
  • Work with senior technical leadership to shape our technical strategy and solutions architecture, so security, risk and compliance feed into technical decisions
  • Help product teams deliver secure systems quickly by building a strong security culture through mentoring, design reviews and training
  • Give product and engineering teams practical guidance on identifying, prioritising and mitigating systemic risks and vulnerabilities
  • Lead the evolution of our security best practice across application development and the wider SDLC, supporting teams with expert advice and automation
  • Influence technical and non-technical stakeholders across Kaluza and client teams
  • Mentor and coach security and software engineers to balance risk with speed and quality
  • Build relationships with third-party security vendors and industry bodies to keep us at the forefront of emerging practices, tooling and standards

What you’ll bring

Ideally, you’ll have:

  • Extensive experience mentoring engineers and collaborating closely (e.g. pairing, swarming)
  • Deep understanding of software security flaws and web application security best practice (OWASP Top 10, CWE/SANS Top 25)
  • Extensive knowledge of CI/CD and DevOps principles, and their security considerations
  • Experience applying AI in your own work and helping others build it safely into how they develop
  • Scripting skills and first-hand experience of software development at scale
  • Working knowledge of Okta or equivalent, to enable workforce identity and enforce access management policies
  • Awareness of AWS and/or GCP security best practice, and some experience with infrastructure as code (e.g. Terraform)
  • Experience applying architectural and software design patterns in a complex environment

You’ll also be:

  • A pragmatic, risk-based decision-maker who weighs the technical and commercial consequences of your choices
  • Skilled at influencing upwards and outwards, with great communication skills
  • Able to set a clear vision for large-scale technical direction and align multiple teams behind it
  • Keen to drive compliance and NFR improvements that balance information security and commercial goals
  • Committed to a culture of learning and improvement, and willing to challenge engineering leadership to support it

Skills (SFIA): We use the SFIA framework to assess and develop our security engineers. Levels run from 1 to 7.

Essential:

  • Level 6: Systems design
  • Level 5: Information security, specialist advice, systems development lifecycle, solution architecture, emerging technology monitoring
  • Level 4: Information assurance, information and data compliance

Desirable: Identity and access management (Level 5), software development (Level 6), learning delivery (Level 3), and information assurance stepping up to Level 5

Our values

Five values guide how we work at Kaluza:

  • Play to win: Collective pride in decarbonising energy at scale.
  • Solve the real problem: Cutting through complexity to focus on real-world outcomes.
  • Build trust every day: Consistency, transparency and doing what we say.
  • Own the outcome: Full accountability, wins and setbacks, without ego.
  • Go further together: Collaboration, respect and different perspectives.

Our perks

  • Time off and family: 26 days’ holiday [plus/including bank holidays], plus 26 weeks’ full pay for new parents with no qualifying service period
  • Health and security: Private medical insurance with virtual GP, life assurance, pension scheme, free mortgage advice and eye tests
  • Pay and flexibility: Discretionary bonus, a Flex Fund of 5% [of salary] to spend on the benefits you want most, retail discounts through Perks at Work
  • Growth and setup: Personal learning budget, home office budget
  • Climate: Furthr, our climate action app

Come as you are

We want to meet people from all walks of life. The more inclusive we are, the better our work will be, and we recognise talent on merit and potential. If you’re excited about the role but don’t tick every box, we’d still love to hear from you. If you need any adjustments during the process, just let us know.

Find out more on our careers page and LinkedIn, or read our Applicant Data Protection Policy.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Kaluza's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Kaluza's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Kaluza's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.