Senior Security Engineer, Omnea

• For calibration, candidates typically bring 5+ years of deep security engineering experience in high-growth, cloud-native SaaS environments - but we care more about impact than years
• Security expert & builder. You design secure architectures and write elegant code (TypeScript or similar). You’ve rolled out tooling like Vanta, Snyk, Semgrep, Wiz or Orca
• Commercial mindset. You enjoy turning security wins into faster sales cycles and stronger renewals. You’ve partnered with GTM or directly handled customer audits/RFPs
• Cloud-first. Deep knowledge of AWS IAM, networking, KMS, serverless hardening, and infrastructure-as-code review
• Bias for action. You iterate quickly, ship pragmatically, and automate everything
• Culture carrier. You coach teammates, document best practices, and keep calm during incidents
• Comfort with ambiguity. First dedicated security hire? Perfect-you’ll set the bar

Desirable

• We’re hiring at both Level 3 (Senior) and Level 4 (Lead)
• For calibration, candidates typically bring 5+ years of deep security engineering experience in high-growth, cloud-native SaaS environments - but we care more about impact than years
• You’ll be the first dedicated security specialist on the team, partnering with product engineers, GTM, and leadership to make Omnea the industry benchmark for security and trust
• Make our security posture airtight. Design and implement security controls across architecture, infrastructure and code (AWS Serverless, CDK/SST, React/TypeScript)
• Shift security left. Embed SAST/DAST, IaC scanning, secure coding standards and threat-modeling into every stage of our CI/CD pipeline
• Own compliance & audits. Run our Vanta instance end-to-end (SOC 2 Type II, ISO 27001, GDPR, etc.) and coordinate third-party pen tests, evidence gathering and policy reviews
• Enable revenue. Partner with Sales & Customer Success to answer security questionnaires, lead RFP security sections, and join prospect calls to remove friction and build trust
• Code and build. Contribute production-ready TypeScript, Terraform/CDK and automation scripts; raise the security bar through secure patterns, libraries and reviews
• Drive security culture. Run incident-response playbooks, tabletop exercises, and brown-bag sessions so every Omnea engineer becomes a security champion
• Massive Ownership. You’ll set the north-star security roadmap and see it through — from brainstorming to shipping dashboards, policies and guard-rails in prod
• Modern, Cloud‑Native Stack. Everything serverless and IaC‑driven; you’ll secure every layer
• Continuous Delivery, Securely. We deploy multiple times/day; your guard‑rails make that safe
• Customer-Facing Impact. Your work unlocks deals, reduces time-to-close, and keeps renewal risk near zero - security as a growth lever, not a blocker
• Collaboration & Autonomy. Plenty of heads-down coding, but also daily pairing with product engineers, GTM, and leadership on high-stakes opportunities
• Scalability Challenges. As we 10× revenue, you’ll evolve our security architecture for multi-region HA, fine-grained data residency, and tight least-privilege controls