Lead Security Engineer | Relocation Offered

Relocate.me; Amsterdam; Hybrid; EUR 110,000 - 170,000; Full time

Benefits offered by this job

Relocation package

Airfare

Moving stipend

Housing assistance

Visa services

Job summary

Catawiki in Amsterdam, Netherlands, seeks a Lead Security Engineer to provide hands-on technical leadership in our Security team within Platform Engineering. You will shape the security roadmap and drive delivery of complex initiatives protecting our marketplace and customers.

The role focuses on application and cloud security, secure software delivery, and risk management across internal and AI-enabled systems, with potential for future leadership opportunities.

Qualifications

• Hands-on security engineering experience in a software or cloud environment with a track record of delivering improvements.
• Strong knowledge of application and cloud security, including IAM, secrets management, and secure SDLC.
• Led threat modelling, secure code and design reviews; delivered remediation that engineers adopt.
• Ability to develop or automate in Ruby, Python, Go or similar language; comfortable reviewing backend code.
• Integrated security into CI/CD, cloud infrastructure or IaC; balance risk and engineering effort.
• Contributed to security incidents investigations/responses and can work under pressure.
• Led technical initiatives and mentored engineers; interest in future leadership roles.
• Influences through credibility; communicates risks clearly to diverse audiences.

Responsibilities

• Shape the security engineering roadmap and lead complex initiatives from assessment and design through implementation.
• Design and build security controls and automation across applications, cloud infrastructure, identity and access, CI/CD and infrastructure as code.
• Lead threat modelling and secure code and design reviews with engineering teams early to identify risks and practical changes.
• Investigate vulnerabilities and recurring security weaknesses; prioritize findings and build reusable controls.
• Improve security checks in engineering workflows, including dependency and secret scanning.
• Contribute to security incident investigations and response; enhance detection tooling and preventive controls.
• Mentor security engineers and help product engineers build security skills through guidance and training.
• Collaborate with Legal, IT and Trust & Safety on security controls, policies and audit evidence.
• Measure effectiveness and communicate progress to stakeholders.

Skills

Security engineering

Application security

Cloud security

Threat modelling

Secure code reviews

Ruby/Python/Go

CI/CD security

Security tooling

Mentoring

Tools

Google Cloud

Kubernetes

Terraform

Job description

Lead Security Engineer

Amsterdam, Netherlands

Catawiki

Advanced relocation package. Adaptation tips. Flight ticket. Money for moving expenses. Housing search assistance. Visa services.

About Catawiki

Catawiki was founded in 2008. It was originally designed as a website where collectors could manage and keep track of their collections online. Visitors can still add new items to the existing catalogue of collectibles. Unsurprisingly, the name Catawiki is a combination of the words 'catalogue' and 'wiki'. In 2011, Catawiki began hosting weekly auctions in various categories, including art, antiques, classic cars, watches, jewellery, fashion, books, and stamps.

Position

As our Lead Security Engineer, you’ll provide hands-on technical leadership in our small Security team within Platform Engineering. You’ll shape the security engineering roadmap and own the delivery of complex security initiatives, working with Product and Platform Engineering to protect our marketplace, our customers and their data.

Our platform runs on Google Cloud and Kubernetes. You’ll focus on application and cloud security, secure software delivery and risks in internal and AI-enabled systems. You’ll combine deep technical work with influence across engineering, turning security risks into controls and practices that teams can use in their everyday workflows.

This is an individual contributor role. As the team evolves, there may be an opportunity to move into people management, based on demonstrated readiness and business needs.

What You Will Do

• Shape the security engineering roadmap and lead complex initiatives from assessment and design through implementation, rollout and ongoing operation.
• Design and build security controls and automation across applications, cloud infrastructure, identity and access, CI/CD and infrastructure as code.
• Lead threat modelling and secure code and design reviews. Work with engineering teams early to identify risks and agree practical changes before systems reach production.
• Investigate vulnerabilities and recurring security weaknesses. Prioritise findings based on exposure and business impact, work with system owners on remediation and build reusable controls that prevent recurrence.
• Improve security checks in engineering workflows, including dependency and secret scanning. Reduce false positives and make findings easier for developers to understand and resolve.
• Contribute to security incident investigations and response. Improve detection and response tooling and use lessons from incidents to strengthen preventive controls.
• Mentor security engineers and help product engineers build security skills through technical guidance, documentation and practical training.
• Work with Legal, IT and Trust & Safety on technical security controls, policies and audit evidence where responsibilities overlap.
• Measure the effectiveness and adoption of the controls you deliver. Communicate progress, technical decisions and remaining risks clearly to engineering and business stakeholders.

Your qualification

• You have substantial hands-on security engineering experience in a software or cloud environment and a track record of delivering security improvements across multiple teams.
• You have strong knowledge of application and cloud security, including identity and access management, secrets management and secure software development.
• You have led threat modelling, secure code and design reviews and complex remediation work, turning findings into solutions that engineers adopt.
• You can develop or automate in Ruby, Python, Go or a similar language and are comfortable reviewing backend code. You have built and operated security tooling or controls in production.
• You have integrated security into CI/CD, cloud infrastructure or infrastructure as code and can make sound trade-offs between risk reduction and engineering effort.
• You have contributed to security incident investigations or responses and can work effectively with others under pressure.
• You have led technical initiatives and mentored engineers. You’re interested in developing your leadership skills, including potentially taking on people management in the future.
• You influence through technical credibility and collaboration, explain risks clearly to different audiences and take responsibility for seeing complex work through to completion.

Helpful Experience

• Experience with Google Cloud, Kubernetes and Terraform or similar infrastructure tooling.
• Experience in a marketplace, e-commerce or another software product business, including account and API security.
• Experience securing AI-enabled applications, agents or data pipelines, or using AI to improve security engineering workflows.

What we offer

• Create a visible impact by working at scale in a global organisation serving millions of customers across 80+ categories. In our flat structure, every role has a broad scope and directly impacts both our customers and the business.
• Learn and grow through our Learning & Development initiatives, including clear development plans and mentorship programmes to support your career progression.
• A culture of connection defines us. We're a passionate, diverse team of 800+ Catawikians representing 60+ nationalities. We foster an inclusive and queer-friendly environment where everyone is encouraged to bring their full self to work.
• Celebrate life's moments with us. You'll receive a €100 Catavoucher when you join, a €50 Catavoucher on your birthday, and an extra day off each year to "Pursue Your Passion". We also offer additional leave for key work anniversaries and important life events. Benefits may vary by location.

Our Offices and Way of Working

Our vibrant offices in Amsterdam and Lisbon are designed to inspire collaboration. Most Catawikians operate in a hybrid setup, combining office-based and remote work, with a minimum of two days per week in the office, unless a role is explicitly stated as fully remote or fully office-based.