Fintech Payments Security Architect (Staff)

Vinted group.; Greater London; Hybrid; GBP 150,000 - 190,000; Full time

Benefits offered by this job

Share options programme

25 working days of holiday

Home office budget and equipment

Employee Assistance Program (EAP)

Pension scheme match

Job summary

Vinted Pay in London seeks a Staff/Senior Staff Security Engineer to scale security across its fintech payments platform. You will translate regulatory requirements into practical guardrails, own the end-to-end security roadmap, and work with engineering teams to embed security into design and delivery.

You will lead automated controls, threat modelling, and risk-based decisions while collaborating with Vinted Pay and Group Security to protect payment assets and data across multi-region

Qualifications

• Hands-on security engineering on large production systems.
• Experience in regulated payments or fintech (PCI DSS, FCA).
• Staff-level track record delivering major technical initiatives.
• Ability to translate risk into design and business impact.

Responsibilities

• Own security roadmap end to end for Vinted Pay infrastructure.
• Transform regulatory requirements into automated controls.
• Review AWS infra, payment pipelines, SIEM, and tooling and fix gaps.
• Own PCI DSS and data protection architecture with multi-region scope.
• Lead cross-functional security initiatives across platforms and teams.
• Maintain risk register and represent Vinted Pay in governance.

Skills

Security engineering

Regulated payments

Staff-level leadership

Risk-based decision making

English proficiency

Tools

Ruby on Rails

Go

MySQL

Temporal

AWS

SIEM

CSPM tooling

Job description

Vinted Pay in London seeks a Staff/Senior Staff Security Engineer to scale security across its fintech payments platform. You will translate regulatory requirements into practical guardrails, own the end-to-end security roadmap, and work with engineering teams to embed security into design and delivery.

You will lead automated controls, threat modelling, and risk-based decisions while collaborating with Vinted Pay and Group Security to protect payment assets and data across multi-region