Lead Security Engineer

Help us use technology to make a big green dent in the universe!

Kraken powers some of the most innovative global developments in energy.

We’re a technology company focused on creating a smart, sustainable energy system. From optimising renewable generation, creating a more intelligent grid and enabling utilities to provide excellent customer experiences, our operating system for energy is transforming the industry around the world in a way that benefits everyone.

It’s a really exciting time in energy. Help us make a real impact on shaping a better, more sustainable future. 

Kraken Customer

What we do: build the most AI-driven, innovative, forward-thinking platform for energy management. From optimizing resources to delivering cost-effective, exceptional customer experiences through advanced Customer Information Systems (CIS), billing, meter data management, CRM, and AI-driven communications, Kraken is powering the next wave of innovation in the energy industry.

Why we do it: future energy will not look like energy as we know it today. We need to not just think about our future, but build for it. Now.

We're looking for a diligent and thoughtful Lead Security Engineer to join and help lead our growing security team. 

The role will be a mix of managing 4-6 Security Engineers, helping out with the strategy for the team, and hands-on work. The goal of the team is to maintain and improve security across Kraken Technologies.

The Security Engineering team does a mix of hands-on engineering to help develop internal tooling and to improve the security of our platform and applications, provide advice and guidance to the rest of the business on security best practices, and maintains our security tooling ensuring it is fit for purpose and following best practice. 

• Have ownership of a functional team within the Cyber Security Team, working closely with the CISO and Head of Cyber Security to define strategic objectives and team direction
• Manage team priorities and ensures initiatives are completed within deadlines
• Collaborate regularly and effectively with the rest of the Cyber Security and Information Security Teams to deliver outcomes
• Lead delivery of major initiatives on clear timelines
• Build a strong culture of open communication where teammates can ask questions without fear, promoting a positive and inclusive team environment.

• Line-manage a group of Security Engineers in the same or similar timezone
• Set clear performance expectations and goals for team members
• Regularly review individual and team performance, offering actionable insights and constructive feedback to support and grow team members

• Deliver technical improvements
• Support team delivery for example through code reviews, technology research or architectural guidance
• Provide support for production systems owned by your team
• Support the implementation of security processes and requirements
• Stay abreast of emerging security threats, technologies, and industry trends to continuously enhance the organisation's security strategy

• Proven experience in a leadership role within Security Engineering or closely related field
• Strong background in Security Engineering with a deep understanding of security best practices and standards.
• Excellent communication, with a focus on doing this asynchronously
• Experience of mentoring and coaching a team to perform at a high-level of quality
• Experience of incident management
• Previous experience working in engineering teams focused on maintaining and improving security of Cloud Service Providers and applications

• Security certifications (any of the famous abbreviations) 
• Certifications from cloud providers’ certification paths
• Security qualifications (e.g. apprenticeships or degrees)
• Strong skills in creating high-quality, comprehensive security documentation
• Familiarity with AWS services and experience in managing cloud security services
• Familiarity with CI/CD tooling and security best practices
• Familiarity with vulnerability management processes and automations
• Experience using logging and monitoring tools (whether this was a SIEM system or not) to generate alerts and reports
• Experience working in organisations that maintain ISO 27001 and/or SOC 1 and SOC 2 type II certifications
• Knowledge of the MITRE ATT&CK framework 

• Great medical, dental, and vision insurance options including FSAs.
• Paid time off — we know working hard means also being able to recharge as needed, we trust our employees to get the work done and take the time they need.
• 401(k) plan with employer match.
• Parental leave. Biological, adoptive and foster parents are all eligible. 
• Pre-tax commuter benefits.
• Flexible working environment: you need to shift around your schedule? You do you, we genuinely believe in work/life balance. 
• Equity Options: every Octopus employee owns part of the business. We’re a team, working together towards huge goals. Every person is crucial to our success, you should be rewarded as such. 
• Modern office or co-working spaces depending on location.
• We hire a wide range of experience levels into our security teams. The salary range for this role in NYC ranges on average from $150,000- $220,000 depending on relevant experience, and role alignment demonstrated throughout the interview process. While the broad salary range is listed, not all candidates will be placed at the top of the range—this will be determined by the overall fit for the position. If you have questions about this, just ask! Our recruiters are happy to provide more context. 

Kraken is a certified Great Place to Work in France, Germany, Spain, Japan and Australia. In the UK we are one of the Best Workplaces on Glassdoor with a score of 4.7. Check out our Welcome to the Jungle site (FR/EN) to learn more about our teams and culture.

Are you ready for a career with us? We want to ensure you have all the tools and environment you need to unleash your potential. If you have any specific accommodations or a unique preference, please contact us at [email protected] and we'll do what we can to customise your interview process for comfort and maximum magic!

Studies have shown that some groups of people, like women, are less likely to apply to a role unless they meet 100% of the job requirements. Whoever you are, if you like one of our jobs, we encourage you to apply as you might just be the candidate we hire. Across Kraken, we're looking for genuinely decent people who are honest and empathetic. Our people are our strongest asset and the unique skills and perspectives people bring to the team are the driving force of our success. As an equal opportunity employer, we do not discriminate on the basis of any protected attribute. We consider all applicants without regard to race, colour, religion, national origin, age, sex, gender identity or expression, sexual orientation, marital or veteran status, disability, or any other legally protected status. U.S. based candidates can learn more about their EEO rights here.

Our (i) Applicant and Candidate Privacy Notice and Artificial Intelligence (AI) Notice, (ii) Website Privacy Notice and (iii) Cookie Notice govern the collection and use of your personal data in connection with your application and use of our website. These policies explain how we handle your data and outline your rights under applicable laws, including, but not limited to, the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Depending on your location, you may have the right to access, correct, or delete your information, object to processing, or withdraw consent. By applying, you acknowledge that you’ve read, understood and consent to these terms