Platform Security Engineer

• Implement and take ownership of our Security roadmap. Working with the Platform Lead, a successful candidate will steadily take ownership over the Platform Security Roadmap, leading implementations and experiments to level up Omnea’s security posture. • Own Security Tooling. From safe-chain plugins to SAST/DAST tooling, we want someone who’s keen to get stuck in, onboard, and evolve our tooling to ensure our posture stays at the bleeding edge. • Deliver Compliance Programs. Omnea plans to tackle multiple additional compliance certifications to enable the business to serve some of the most regulated industries on the planet. You’ll have a massive hand in making sure we’re up to those standards. • Collaborate with our DevX streams. Omnea ships fast, and we want to ship even faster. Making sure we can enable that safely and securely will become your wheelhouse. • Implement hardening patterns. See an area where code security could be improved? Let’s do it, and do it in a way that can be scaled out across the entire codebase and easily implemented by the rest of the engineering staff. What Can You Expect? • A strong team. You'll join a platform team of senior and staff engineers who set a high bar and will push you to do your best work. • Modern, cloud-native stack. Everything serverless and IaC-driven (AWS, Pulumi, TypeScript end-to-end). • Continuous delivery. We deploy multiple times a day. Your work determines how fast and safely the whole engineering org ships. • Scalability challenges. As we 10x revenue, you'll be a part of evolving our infrastructure to defend against new security threats and keep us one step ahead. • Customer impact. Delivering on our compliance goals and successfully handling audits. • Massive ownership. You own problems end-to-end, from brainstorming through to production. • Collaboration & autonomy. Plenty of heads-down technical work, but also close partnership with product engineers and engineering leadership.

We're hiring at both Level 3 (Senior) and Level 4 (Staff). For calibration, candidates typically bring 5+ years of platform engineering experience in high-growth, cloud-native SaaS environments, but we care more about impact than years. We’re looking for that “T”-shaped skillset where the candidate’s depth is in Cloud Security. Furthermore, the ideal candidate will have a product engineering background but caught the bug for security and cares deeply about enabling people to work fast, safely. Finally, we’re looking for someone who sees security as an enabler and force-multiplier and answers questions with a “Yes, here’s how we do it securely” attitude as opposed to the flat “No” security teams are too often renowned for. • Platform engineer & builder. You design reliable infrastructure and write clean production code (TypeScript or similar). You've built and maintained CI/CD pipelines, IaC, and security gates at scale. • Cloud-native. Deep knowledge of AWS (Lambda, DynamoDB, EventBridge, IAM, networking), or equivalent cloud-native experience. You understand serverless and its trade-offs. • Security as an enabler. You think about engineers and business as your customers. You automate toil, improve feedback loops, and care deeply about making other people productive. • Commercially minded. You understand that infrastructure & security exist to serve the product and the business. You make trade-offs with that in mind. • Bias for action. You iterate quickly, ship pragmatically, and automate everything. • Culture carrier. You coach teammates, share knowledge freely, and keep calm when things break.

Our Mission At Omnea, we’re reinventing how enterprise businesses operate, starting with the most painful parts: procurement – where a single purchase can drag on for months, trigger 50+ emails, and pull in Finance, Legal, Security, and IT just to get something approved. We’ve raised $75M from Khosla Ventures, Insight Partners, and Accel to change that. Our AI-native platform connects every person, step, and system so buying is fast, safe, and efficient – one place to request, automated approvals and renewals, real-time supplier risk, and complete spend visibility. The opportunity is massive. Every enterprise on the planet has this problem and nobody has solved it. We’ve 10x’d ARR to double-digit millions in 18 months and are trusted by global enterprises like Spotify, MongoDB, Monzo, and Albertsons. We’re now the 4th fastest growing startup in Europe & the Sunday Times' #1 Best Medium Sized Tech Company To Work for. Our team previously scaled Tessian (cybersecurity tech, backed by Sequoia, Balderton, Accel, acquired post-Series C), and our team includes ex-founders operators who’ve grown unicorns, shipped world-class products, and executed at the highest levels. You’ll work alongside leaders like Ben, Abs, Sabrina, and Rebe. Find out more about the team and life at Omnea here. Why We Need a Platform Security Engineer Now Omnea takes security seriously. In an era where exploits and supply chain attacks are being discovered and conducted faster than ever before, it’s vital that we stay on the cutting edge of keeping our systems and our customers’ data safe.   Hardening our systems is only part of the solution. As we scale out to more industries with their diverse security requirements, we want another individual who can help us attain and maintain higher levels of compliance certification.   What We're Looking For We're hiring at both Level 3 (Senior) and Level 4 (Staff). For calibration, candidates typically bring 5+ years of platform engineering experience in high-growth, cloud-native SaaS environments, but we care more about impact than years. We’re looking for that “T”-shaped skillset where the candidate’s depth is in Cloud Security.   Furthermore, the ideal candidate will have a product engineering background but caught the bug for security and cares deeply about enabling people to work fast, safely. Finally, we’re looking for someone who sees security as an enabler and force-multiplier and answers questions with a “Yes, here’s how we do it securely” attitude as opposed to the flat “No” security teams are too often renowned for.   What You'll Do • Implement and take ownership of our Security roadmap. Working with the Platform Lead, a successful candidate will steadily take ownership over the Platform Security Roadmap, leading implementations and experiments to level up Omnea’s security posture. • Own Security Tooling. From safe-chain plugins to SAST/DAST tooling, we want someone who’s keen to get stuck in, onboard, and evolve our tooling to ensure our posture stays at the bleeding edge. • Deliver Compliance Programs. Omnea plans to tackle multiple additional compliance certifications to enable the business to serve some of the most regulated industries on the planet. You’ll have a massive hand in making sure we’re up to those standards. • Collaborate with our DevX streams. Omnea ships fast, and we want to ship even faster. Making sure we can enable that safely and securely will become your wheelhouse. • Implement hardening patterns. See an area where code security could be improved? Let’s do it, and do it in a way that can be scaled out across the entire codebase and easily implemented by the rest of the engineering staff. What Can You Expect? • A strong team. You'll join a platform team of senior and staff engineers who set a high bar and will push you to do your best work. • Modern, cloud-native stack. Everything serverless and IaC-driven (AWS, Pulumi, TypeScript end-to-end). • Continuous delivery. We deploy multiple times a day. Your work determines how fast and safely the whole engineering org ships. • Scalability challenges. As we 10x revenue, you'll be a part of evolving our infrastructure to defend against new security threats and keep us one step ahead. • Customer impact. Delivering on our compliance goals and successfully handling audits. • Massive ownership. You own problems end-to-end, from brainstorming through to production. • Collaboration & autonomy. Plenty of heads-down technical work, but also close partnership with product engineers and engineering leadership. About You • Platform engineer & builder. You design reliable infrastructure and write clean production code (TypeScript or similar). You've built and maintained CI/CD pipelines, IaC, and security gates at scale. • Cloud-native. Deep knowledge of AWS (Lambda, DynamoDB, EventBridge, IAM, networking), or equivalent cloud-native experience. You understand serverless and its trade-offs. • Security as an enabler. You think about engineers and business as your customers. You automate toil, improve feedback loops, and care deeply about making other people productive. • Commercially minded. You understand that infrastructure & security exist to serve the product and the business. You make trade-offs with that in mind. • Bias for action. You iterate quickly, ship pragmatically, and automate everything. • Culture carrier. You coach teammates, share knowledge freely, and keep calm when things break. Nice-to-haves • Experience with Pulumi or similar IaC frameworks. • ISC2 (any level) certification. • Experience running SaaS compliance programs (ISO:27001, SOC 2 Type II). • Open-source contributions to security, infrastructure, or developer tooling projects. You can learn more about Engineering at Omnea and our hiring process via our R&D Candidate Hub here. At Omnea, we embrace diversity. To build a product that's loved by everyone, we're best served by a team with all sorts of bac