IT security engineer

Vinted; Amsterdam; On-site; EUR 122,000 - 205,000; Full time

Benefits offered by this job

Share options programme

25 Days of paid annual leave

Newest MacBook models

Home office equipment budget (€540)

Daily lunch allowance

Company bike leasing scheme

Work from Home allowance

Individual learning budget (€3,000+/yr

Job summary

Vinted ищет руководителя по IT-безопасности для определения дорожной карты, повышения уровня безопасности и внедрения лучших практик на уровне предприятий в офисах Нидерландов. Ваша роль охватит защиту Mac-установок, конечных точек и рабочих процессов идентификации, а также безопасность SaaS и сетевых сегментов.

Требуется опыт построения ИБ-практик, умение говорить на языке бизнеса и владение английским на уровне делового общения. Концепция удалённой работы уточняется в рамках офиса в Амстердаме.

Qualifications

• Глубокий практический опыт обеспечения корпоративной IT-безопасности на масштабе организации.
• Способность выявлять и устранять пути атаки, внедрять исправления.
• Инженерный подход к ИТ: скрипты и инфраструктура как код; развертывание контролей как продукты.
• Опыт построения security-практики в зрелости между разными уровнями IT-организации.
• Опыт работы с физическими локациями (склады, лаборатории) и удаленным доступом.

Responsibilities

• Возглавлять дорожную карту ИБ, моделировать угрозы и доводить их до закрытия.
• Поднимать грамотность по безопасности среди IT-инженеров и сотрудников.
• Устанавливать безопасные стандарты для Mac-дефенсий и Windows/Linux конечных точек.
• Обеспечивать безопасность рабочих идентификаций, RBAC и управления доступом.
• Обеспечить безопасность SaaS и бизнес-приложений, включая OAuth и API интеграции.

Skills

Security strategy

Threat modeling

Python/Go scripting

Identity & access management

Security governance

Written English

Tools

Okta

Jamf

Google Workspace

Atlassian

Workato

Job description

Описание

Vinted operates a second-hand marketplace connecting members who buy and sell pre-loved clothing and lifestyle items. Its business units also provide shipping services through a network of pick-up and drop-off points and secure payment services integrated into the Vinted app.

Задачи

• Own the IT security roadmap, threat-model the workplace estate, prioritise risks by real attack paths, and drive them to closure
• Raise security fluency among IT engineers and the wider workforce, enabling sound risk-based decisions
• Establish hardened, managed security baselines across the Mac-first device fleet and its Windows and Linux endpoints, covering least privilege, endpoint detection and response, device trust, and the full device lifecycle
• Secure workforce identity through phishing-resistant authentication, joiner-mover-leaver automation, role-based and privileged access, four-eyes controls, and time-bound access for contractors and community support agents
• Secure the SaaS and business-application estate, including configuration baselines, OAuth and API integrations, data flows, shadow IT, and shadow AI
• Secure networks and hardware at offices, warehouses, and electronics verification centres, including remote access and the boundary with Vinted Go’s security team
• Engineer security automation and solutions that improve resilience, align with business objectives, and continuously close security gaps
• Maintain the risk register, prepare mitigation-or-acceptance decisions against central thresholds, represent IT in security governance, and make evidence integral to compliance processes

Требования

• Deep hands-on experience securing a corporate IT estate at scale, including endpoints and device management, workforce identity and access, SaaS, and business applications
• Ability to identify attack paths and drive or build fixes
• Apply an engineering mindset to IT; automate and script in Python, Go, or similar; manage identity and infrastructure as code; and build controls as products
• Ability to build a security practice from scratch within an IT or infrastructure organisation, including in a low-maturity environment
• Experience securing networks and devices at physical sites such as warehouses, labs, verification or repair centres, or willingness to do so
• Influence without authority and translate technical risk into business consequences for senior audiences
• Excellent written and spoken English
• Будет плюсом: experience with Okta, Jamf, Google Workspace, Atlassian, Workato, or equivalents; hardware and device security, including firmware, secure boot, device attestation, peripheral and USB threats, and EDR engineering; offensive security or certifications such as OSCP; detection engineering on identity and endpoint telemetry; ISO 27001 or NIS2 implementation in workplace scope

Условия

• Annual gross salary: €121.600—€205.200 EUR, excluding 8% holiday pay
• Share options programme
• 25 Days of paid annual leave
• Newest MacBook models
• Confidential Employee Assistance Program for the employee and their family
• Frequent team-building events
• Home office equipment and a personal budget of up to €540 for home workplace furniture
• Daily lunch allowance
• Company bike leasing scheme
• Monthly budget for a flexible benefits platform
• Work from Home allowance
• Collective Defined Contribution Pension plan
• Personal monthly budget for shopping on Vinted NS mobility card
• Dog-friendly office
• Workation policy: up to 90 days per year in the EU, including 21 days globally; for non-EU citizens, 21 days worldwide. This can be combined with vacation or personal time
• Individual learning budget starting at €3,000 per year and up to 10 working days over a 2-year period for personal and professional development