Pro members applied to this job 36 hours before you saw itGet Pro ›

kaluza - Security Operations Lead

Bristol, UK - Hybrid£70k - £87k/year6d ago

In Office Staff EMEA Cybersecurity Director of Security Head of Security Team Management Go Performance Management Mentoring Close Reporting Governance

Requirements

• Ideally, you’ll have: • Experience managing and mentoring engineers and/or operations specialists • Expertise in incident response, with hands-on experience leading major incidents • Experience in threat intelligence and hunting, proactively seeking threats in complex, cloud-native environments • A good working understanding of adversarial techniques (MITRE ATT&CK and similar frameworks), and how you keep up to date • Genuine curiosity about the security risks introduced by AI systems, such as model abuse, prompt injection and data exfiltration • Familiarity with modern security operations tooling • Experience automating repeatable processes rather than relying on manual effort • You’ll also be: • An experienced leader with a track record of building and developing security operations teams across multiple geographies and time zones, who leads by example and creates clarity in ambiguous situations • Someone teams look to when things get difficult: composed, structured and decisive • Able to communicate risk clearly and confidently to audiences from engineers to executives • Able to show how you’ve built strong relationships across engineering, product and compliance • Able to set out a vision and strategy for how security operations will mature, and win buy-in from your team and stakeholders • Keen to drive compliance and NFR improvements that balance information security and commercial goals • Ready to challenge the status quo and find ways to make security more efficient and effective with AI • Skills (SFIA): We use the SFIA framework https://sfia-online.org to assess and develop everyone in security roles. Levels run from 1 to 7. • Level 5: Incident management https://sfia-online.org/en/sfia-9/skills/incident-management, threat intelligence https://sfia-online.org/en/sfia-9/skills/threat-intelligence, vulnerability assessment https://sfia-online.org/en/sfia-9/skills/vulnerability-assessment, security operations https://sfia-online.org/en/sfia-9/skills/security-operations, penetration testing https://sfia-online.org/en/sfia-9/skills/penetration-testing, specialist advice https://sfia-online.org/en/sfia-9/skills/specialist-advice • Level 4: Performance management https://sfia-online.org/en/sfia-9/skills/performance-management • Level 3: Information security https://sfia-online.org/en/sfia-9/skills/information-security • Desirable: Vulnerability research (Level 5) https://sfia-online.org/en/sfia-9/skills/vulnerability-research, information assurance https://sfia-online.org/en/sfia-9/skills/information-assurance (Level 5), emerging technology monitoring https://sfia-online.org/en/sfia-9/skills/emerging-technology-monitoring (Level 4), professional development https://sfia-online.org/en/sfia-9/skills/professional-development (Level 4) • Five values guide how we work at Kaluza: • Play to win: Collective pride in decarbonising energy at scale. • Solve the real problem: Cutting through complexity to focus on real-world outcomes. • Build trust every day: Consistency, transparency and doing what we say. • Own the outcome: Full accountability, wins and setbacks, without ego. • Go further together: Collaboration, respect and different perspectives.

Responsibilities

• You’ll join the Information & Cyber Security team, a core part of our Platform & Security Engineering organisation. Security at Kaluza isn’t a silo, so you’ll work closely with colleagues across security engineering, identity and access management, platform engineering and enterprise technical services. • As Security Operations Lead, you’ll own and grow the Security Operations function, leading a team across the UK and Australia. You’ll be the senior escalation point for security incidents, a calm and authoritative presence under pressure, and the person who keeps our operational security evolving to meet new threats, including those that come with being an AI-enabled business. • Lead the team: Build, mentor and manage the performance of a Security Operations team across the UK and Australia, creating an environment of continuous learning, clear ownership and psychological safety • Evolve incident response: Develop our incident response processes, especially around AI, maintain playbooks and standard operating procedures, and run exercises that build team confidence when it matters most • Hunt threats: Proactively hunt for threats before they become incidents, and work with penetration testers, red teams and bug bounty programmes to find weaknesses, then partner with security engineering and technology teams to close gaps • Own detection and tooling: Own our security monitoring and detection capability, including SIEM, EDR and threat intelligence platforms, driving the tooling roadmap, tuning detections to cut noise, and championing automation • Report on what matters: Define and own Security Operations KPIs and KRIs, and give senior stakeholders clear reporting on the health of the function, including mean time to detect, mean time to respond and coverage trends • Support compliance and governance: Make sure our security operations posture supports our regulatory and contractual obligations, acting as a key stakeholder in audits, assessments and customer security reviews, and working closely with Legal, Compliance and Privacy

Benefits

• Time off and family: 26 days’ holiday [plus/including bank holidays], plus 26 weeks’ full pay for new parents with no qualifying service period • Health and security: Private medical insurance with virtual GP, life assurance, pension scheme, free mortgage advice and eye tests • Pay and flexibility: Discretionary bonus, a Flex Fund of 5% [of salary] to spend on the benefits you want most, retail discounts through Perks at Work • Growth and setup: Personal learning budget, home office budget • Climate: Furthr, our climate action app • Come as you are • We want to meet people from all walks of life. The more inclusive we are, the better our work will be, and we recognise talent on merit and potential. If you’re excited about the role but don’t tick every box, we’d still love to hear from you. If you need any adjustments during the process, just let us know. • Find out more on our careers page https://www.kaluza.com/careers/ and LinkedIn https://www.linkedin.com/company/kaluza/, or read our Applicant Data Protection Policy https://www.kaluza.com/applicant-data-protection-notice/.