Lead Security Engineer
Help us use technology to make a big green dent in the universe!
Kraken powers some of the most innovative global developments in energy.
We’re a technology company focused on creating a smart, sustainable energy system. From optimising renewable generation, creating a more intelligent grid and enabling utilities to provide excellent customer experiences, our operating system for energy is transforming the industry around the world in a way that benefits everyone.
It’s a really exciting time in energy. Help us make a real impact on shaping a better, more sustainable future.
Kraken Customer
What we do: build the most AI-driven, innovative, forward-thinking platform for energy management. From optimizing resources to delivering cost-effective, exceptional customer experiences through advanced Customer Information Systems (CIS), billing, meter data management, CRM, and AI-driven communications, Kraken is powering the next wave of innovation in the energy industry.
Why we do it: future energy will not look like energy as we know it today. We need to not just think about our future, but build for it. Now.
We're looking for a diligent and thoughtful Lead Security Engineer to join and help lead our growing security team.
The role will be a mix of managing 4-6 Security Engineers, helping out with the strategy for the team, and hands-on work. The goal of the team is to maintain and improve security across Kraken Technologies.
The Security Engineering team does a mix of hands-on engineering to help develop internal tooling and to improve the security of our platform and applications, provide advice and guidance to the rest of the business on security best practices, and maintains our security tooling ensuring it is fit for purpose and following best practice.
What you'll do: Team Leadership
- Have ownership of a functional team within the Cyber Security Team, working closely with the CISO and Head of Cyber Security to define strategic objectives and team direction
- Manage team priorities and ensures initiatives are completed within deadlines
- Collaborate regularly and effectively with the rest of the Cyber Security and Information Security Teams to deliver outcomes
- Lead delivery of major initiatives on clear timelines
- Build a strong culture of open communication where teammates can ask questions without fear, promoting a positive and inclusive team environment.
What you'll do: People Management
- Line-manage a group of Security Engineers in the same or similar timezone
- Set clear performance expectations and goals for team members
- Regularly review individual and team performance, offering actionable insights and constructive feedback to support and grow team members
What you'll do: Technical Delivery
- Deliver technical improvements
- Support team delivery for example through code reviews, technology research or architectural guidance
- Provide support for production systems owned by your team
- Support the implementation of security processes and requirements
- Stay abreast of emerging security threats, technologies, and industry trends to continuously enhance the organisation's security strategy
What you'll have:
- Proven experience in a leadership role within Security Engineering or closely related field
- Strong background in Security Engineering with a deep understanding of security best practices and standards.
- Excellent communication, with a focus on doing this asynchronously
- Experience of mentoring and coaching a team to perform at a high-level of quality
- Experience of incident management
- Previous experience working in engineering teams focused on maintaining and improving security of Cloud Service Providers and applications
What will help:
- Security certifications (any of the famous abbreviations)
- Certifications from cloud providers’ certification paths
- Security qualifications (e.g. apprenticeships or degrees)
- Strong skills in creating high-quality, comprehensive security documentation
- Familiarity with AWS services and experience in managing cloud security services
- Familiarity with CI/CD tooling and security best practices
- Familiarity with vulnerability management processes and automations
- Experience using logging and monitoring tools (whether this was a SIEM system or not) to generate alerts and reports
- Experience working in organisations that maintain ISO 27001 and/or SOC 1 and SOC 2 type II certifications
- Knowledge of the MITRE ATT&CK framework
Why you'll love it here:
- Great medical, dental, and vision insurance options including FSAs.
- Paid time off — we know working hard means also being able to recharge as needed, we trust our employees to get the work done and take the time they need.
- 401(k) plan with employer match.
- Parental leave. Biological, adoptive and foster parents are all eligible.
- Pre-tax commuter benefits.
- Flexible working environment: you need to shift around your schedule? You do you, we genuinely believe in work/life balance.
- Equity Options: every Octopus employee owns part of the business. We’re a team, working together towards huge goals. Every person is crucial to our success, you should be rewarded as such.
- Modern office or co-working spaces depending on location.
- We hire a wide range of experience levels into our security teams. The salary range for this role in NYC ranges on average from $150,000- $220,000 depending on relevant experience, and role alignment demonstrated throughout the interview process. While the broad salary range is listed, not all candidates will be placed at the top of the range—this will be determined by the overall fit for the position. If you have questions about this, just ask! Our recruiters are happy to provide more context.
