Security Operations Lead in Bristol

This role is based in Bristol or London and requires an existing right to work in the UK. At this time, we are not able to offer visa sponsorship for this role. We are committed to building a diverse, global team and our sponsorship policy is evaluated on a role-by-role basis.

Kaluza is the Energy Intelligence Platform, turning energy complexity into seamless coordination. We help energy companies overcome today's challenges while accelerating the shift to a clean, electrified future. Our platform orchestrates millions of real-time decisions across homes, devices, markets and grids. By combining predictive algorithms with human‑centred design, Kaluza makes clean energy dependable, affordable and adaptive to everyday life.

You’ll be joining the Information & Cyber Security team, a core part of our Platform & Security Engineering organisation. Security at Kaluza isn’t a silo — you’ll work closely with colleagues across security engineering, application security, identity and access management, cloud security, and security architecture.

• Team Leadership: Building, mentoring and coaching a high‑performing Security Operations team across the UK and Australia. You’ll create an environment of continuous learning, clear ownership, and psychological safety — where your team feels empowered to act decisively under pressure.
• Incident Response: Evolving and developing our incident response processes end‑to‑end. You’ll ensure our response capabilities meet regulatory and contractual compliance obligations, develop and maintain playbooks and standard operating procedures, and run exercises that build team confidence and reduce uncertainty when it matters most.
• AI Security Operations: Building out a dedicated response capability for AI‑related security incidents — a genuinely novel challenge. You’ll develop playbooks for AI‑specific threat scenarios, run tabletop and live exercises, and work hand‑in‑hand with our Security Engineering team to build the safeguards and controls needed to reduce impact and improve resilience.
• Threat Hunting & Adversarial Engagement: Proactively hunting for threats across our environment before they become incidents. You’ll engage with penetration testers, red teams and bug bounty programmes to surface weaknesses in our defences, and work with Security Engineering, Application Security and our broader engineering and technology teams to close gaps and strengthen our controls.
• Detection & Tooling: Owning our security monitoring and detection capability — SIEM, SOAR, EDR, and threat intelligence platforms. You’ll drive the tooling roadmap, tuning detections to reduce noise and increase fidelity, and champion automation to keep pace with the threat landscape.
• Metrics & Reporting: Defining and owning the Security Operations KPIs and KRIs that matter. You’ll produce clear, concise reporting for senior stakeholders and leadership on the health of the function — including mean time to detect, mean time to respond, and coverage trends.
• Compliance & Governance: Ensuring our security operations posture supports Kaluza’s regulatory and contractual obligations. You’ll act as a key stakeholder in audits, assessments and customer security reviews, and maintain close alignment with our Legal, Compliance and Privacy teams.

• Leadership Experience: A track record of building and developing security operations teams, including managing people across multiple geographies and time zones. You lead by example, invest in your people, and create clarity in ambiguous situations.
• Incident Response Expertise: Hands‑on experience leading major incident response, including regulatory notification obligations. You’re someone teams look to when things get difficult — composed, structured, and decisive.
• Threat Intelligence & Hunting: Experience proactively hunting for threats in complex, cloud‑native environments, and a working understanding of adversarial techniques (MITRE ATT&CK and similar frameworks).
• AI Security Awareness: A genuine curiosity about the security risks introduced by AI systems — model abuse, prompt injection, data exfiltration, and beyond — and a desire to be at the forefront of building defences in this space.
• Tooling & Automation: Familiarity with modern security operations tooling (SIEM, SOAR, EDR, threat intel platforms) and a preference for automation and repeatable processes over manual effort.
• Communication & Influence: The ability to communicate risk clearly and confidently to a wide range of audiences — from engineers to executives — and to build strong relationships across engineering, product and compliance functions.

• Play to win
• Solve the real problem
• Build trust every day
• Own the outcome
• Go further together

• Pension Scheme
• Discretionary Bonus Scheme
• Private Medical Insurance + Virtual GP
• Life Assurance
• Access to Furthr — a Climate Action app
• Free Mortgage Advice and Eye Tests
• Perks at Work — access to thousands of retail discounts
• 5% Flex Fund to spend on the benefits you want most
• 26 days holiday
• Flexible bank holidays, giving you an additional 8 days which you can choose to take whenever you like
• Progressive leave policies with no qualifying service periods, including 26 weeks full pay if you have a new addition to your family
• Dedicated personal learning and home office budgets
• Flexible working — we trust you to work in a way that suits your lifestyle
• And more…

Even better? You’ll have access to these benefits from day 1 when you join. We want the best people. We’re keen to meet people from all walks of life — our view is that the more inclusive we are, the better our work will be. We want to build teams which represent a variety of experiences, perspectives and skills, and we recognise talent on the basis of merit and potential. We understand some people may not apply for jobs unless they tick every box. But if you’re excited about joining us and think you have some of what we’re looking for, even if you’re not 100% sure, we’d still love to hear from you.