Platform Security Engineer at Omnea in London

  • Company: Omnea
  • Location: London
  • Job type: full time
  • Workplace: remote
  • Posted: 2026-10-06

Apply for this role

All open roles at Omnea

Job description

Our Mission: Omnea is the agentic operating system for procurement. Procurement touches every pound a business spends, yet requests still stall for weeks and approvals get lost in inboxes. Our AI-first platform changes that: our agents capture requests, route approvals, onboard suppliers, flag risk and track every renewal, while anyone in the business can ask a question and get an answer grounded in their own company’s data. Buying becomes painless for everyone, procurement gets a seat at the table, and our customers have saved more than 100,000 hours of manual work so far. Companies like Spotify, PayPal, T. Rowe Price, JustEat, Adyen and S&P Global run procurement on Omnea. We’re backed by $75M from Khosla Ventures, Insight Partners and Accel, and we’ve been named the UK’s number one startup in the Startups 100, ranked 11th on Sifted’s 2026 list of Europe’s fastest-growing companies, and recognised as one of Fast Company’s Most Innovative Companies. Talent density matters more to us than almost anything else. We keep the bar high in every team, so everyone here has real ownership and real impact. Our team is full of former founders and operators who’ve scaled unicorns, and we’re looking for people who want to do the best work of their careers alongside them. Find out more about the team and life at Omnea here. Why We Need a Platform Security Engineer Now Omnea takes security seriously. In an era where exploits and supply chain attacks are being discovered and conducted faster than ever before, it’s vital that we stay on the cutting edge of keeping our systems and our customers’ data safe. Hardening our systems is only part of the solution. As we scale out to more industries with their diverse security requirements, we want another individual who can help us attain and maintain higher levels of compliance certification. What We're Looking For We're hiring at both Level 3 (Senior) and Level 4 (Staff). For calibration, candidates typically bring 5+ years of platform engineering experience in high-growth, cloud-native SaaS environments, but we care more about impact than years. We’re looking for that “T”-shaped skillset where the candidate’s depth is in Cloud Security. Furthermore, the ideal candidate will have a product engineering background but caught the bug for security and cares deeply about enabling people to work fast, safely. Finally, we’re looking for someone who sees security as an enabler and force-multiplier and answers questions with a “Yes, here’s how we do it securely” attitude as opposed to the flat “No” security teams are too often renowned for. What You'll Do • Implement and take ownership of our Security roadmap. Working with the Platform Lead, a successful candidate will steadily take ownership over the Platform Security Roadmap, leading implementations and experiments to level up Omnea’s security posture. • Own Security Tooling. From safe-chain plugins to SAST/DAST tooling, we want someone who’s keen to get stuck in, onboard, and evolve our tooling to ensure our posture stays at the bleeding edge. • Deliver Compliance Programs. Omnea plans to tackle multiple additional compliance certifications to enable the business to serve some of the most regulated industries on the planet. You’ll have a massive hand in making sure we’re up to those standards. • Collaborate with our DevX streams. Omnea ships fast, and we want to ship even faster. Making sure we can enable that safely and securely will become your wheelhouse. • Implement hardening patterns. See an area where code security could be improved? Let’s do it, and do it in a way that can be scaled out across the entire codebase and easily implemented by the rest of the engineering staff. What Can You Expect? • A strong team. You'll join a platform team of senior and staff engineers who set a high bar and will push you to do your best work. • Modern, cloud-native stack. Everything serverless and IaC-driven (AWS, Pulumi, TypeScript end-to-end). • Continuous delive

Platform Security Engineer on JobPost.