Senior Staff Security Engineer – FinTech Payments (Hybrid)

Vinted; Greater London; Hybrid; GBP 98,000 - 169,000; Full time

Benefits offered by this job

Share options

25 days holiday

MacBook devices

Home office budget €540

EAP

Medical Insurance

Life and income protection

Pension scheme

Gym discount

Lunch benefit

Team-building events

Personal shopping budget

Job summary

Vinted is looking for a Staff/Senior Staff Security Engineer for Vinted Pay to own security across a multi-region AWS-based payments platform. You'll translate regulatory requirements into practical guardrails, drive technical controls, and lead cross-functional security initiatives with the Payments engineering and group security teams.

You will start hands-on and grow into a broader leadership role, reporting to the Director of Engineering and collaborating with security peers across Vinted.

Qualifications

• Strong hands-on security engineering on production systems.
• Experience in regulated payments/fintech and PCI DSS compliance.
• Staff- or principal-level track record delivering major initiatives.
• Ability to influence without authority and translate risk into business outcomes.
• Excellent written and spoken English.
• Experience with security tooling and observability to improve risk posture.

Responsibilities

• Own the Vinted Pay security roadmap end to end; translate regulatory requirements into practical controls.
• Turn regulation into engineering: map PCI DSS, DORA, and local requirements into automated controls.
• Review AWS infrastructure, payment pipelines, SIEM and vulnerability tooling; fix gaps by priority.
• Own PCI DSS and data protection architecture across multi-region environments; provide evidence for assessors.
• Lead cross-functional security initiatives across Payments Platform, Payments Engineering, and Group Security.
• Maintain risk register and governance; drive mitigation decisions.
• Embed secure development into Payments engineering to bake security into design.

Skills

Security engineering

Fintech experience

Staff level track

Influence without authority

Observability tooling

AWS security

Privacy engineering

English fluency

Tools

Ruby on Rails

Go

MySQL

Temporal

AWS

Kibana

Grafana

Prometheus

Wiz

SIEM

Job description

Vinted is looking for a Staff/Senior Staff Security Engineer for Vinted Pay to own security across a multi-region AWS-based payments platform. You'll translate regulatory requirements into practical guardrails, drive technical controls, and lead cross-functional security initiatives with the Payments engineering and group security teams.

You will start hands-on and grow into a broader leadership role, reporting to the Director of Engineering and collaborating with security peers across Vinted.