SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Omnea is a Series B AI-native procurement platform that has raised $75M from Khosla Ventures, Insight Partners, and Accel. The company has 10x'd ARR to double-digit millions in 18 months and is trusted by global enterprises including Spotify, MongoDB, Monzo, and Albertsons. The team includes ex-founders and operators who previously scaled Tessian (cybersecurity, acquired post-Series C).
As a Platform Security Engineer, you will implement and own Omnea's security roadmap in partnership with the Platform Lead, driving implementations and experiments to level up the company's security posture. You'll own security tooling across the stack—from supply-chain plugins to SAST/DAST tools—keeping the platform at the bleeding edge. A major focus will be delivering compliance programs; Omnea plans to pursue multiple additional certifications (ISO 27001, SOC 2 Type II) to serve highly regulated industries.
You'll collaborate closely with DevX streams to enable fast, safe shipping—multiple deployments per day. You'll identify and implement hardening patterns that scale across the entire codebase and can be easily adopted by the broader engineering team. The role offers massive ownership: you own problems end-to-end from brainstorming through production, with close partnership with product engineers and engineering leadership.
The platform team is composed of senior and staff engineers who set a high bar. You'll work with a modern, cloud-native stack (AWS, Pulumi, TypeScript end-to-end), all serverless and infrastructure-as-code driven. As Omnea 10x's revenue, you'll evolve infrastructure to defend against emerging security threats and stay ahead of the curve. You'll deliver on compliance goals and successfully handle audits, directly impacting customer trust and business growth.
Omnea works Tuesdays, Wednesdays, and Thursdays in-person at the London office. The company emphasizes culture, autonomy, and a bias for action—iterating quickly, shipping pragmatically, and automating toil.
**Requirements:**
- 5+ years of platform engineering experience in high-growth, cloud-native SaaS environments (impact valued over years)
- Deep expertise in Cloud Security (T-shaped skillset with security as the depth)
- Product engineering background with a passion for security
- Design and maintain reliable infrastructure; write clean production code (TypeScript or similar)
- Built and maintained CI/CD pipelines, IaC, and security gates at scale
- Deep knowledge of AWS (Lambda, DynamoDB, EventBridge, IAM, networking) or equivalent cloud-native experience
- Understand serverless architecture and its trade-offs
- Think of engineers and business as customers; automate toil and improve feedback loops
- Understand that infrastructure and security serve the product and business; make pragmatic trade-offs
- Iterate quickly, ship pragmatically, automate everything
- Coach teammates, share knowledge freely, stay calm under pressure
**Nice-to-haves:**
- Experience with Pulumi or similar IaC frameworks
- ISC2 certification (any level)
- Experience running SaaS compliance programs (ISO 27001, SOC 2 Type II)
- Open-source contributions to security, infrastructure, or developer tooling projects
