Lead Security Engineer: Secure Cloud & Apps

Relocate; Amsterdam; On-site; EUR 120,000 - 180,000; Full time

Job summary

Catawiki in Amsterdam is hiring a Lead Security Engineer to provide hands-on technical leadership in our small Security team within Platform Engineering. You’ll shape the security roadmap and own the delivery of complex initiatives, protecting our marketplace and customers.

The role focuses on application and cloud security, secure software delivery and risks in internal and AI-enabled systems, combining deep technical work with influence across engineering teams.

Qualifications

• Substantial hands-on security engineering experience in software or cloud environments.
• Strong knowledge of application and cloud security, IAM, secrets management and secure SDLC.

Responsibilities

• Shape the security engineering roadmap and lead complex initiatives from assessment through rollout.
• Design and build security controls across apps, cloud infrastructure, IAM, and IaC.
• Lead threat modelling and secure code/design reviews with engineering teams.
• Investigate vulnerabilities, prioritize findings, and implement reusable controls.
• Improve security checks in engineering workflows and reduce false positives.
• Contribute to security incident investigations and strengthen preventive controls.
• Mentor engineers and share practical security guidance and training.
• Collaborate with Legal, IT, Trust & Safety on security controls and audit evidence.
• Measure effectiveness and adoption of controls and communicate progress to stakeholders.

Skills

Security Engineering

Cloud Security

Threat Modelling

Tools

Kubernetes

CI/CD tooling

Job description

Catawiki in Amsterdam is hiring a Lead Security Engineer to provide hands-on technical leadership in our small Security team within Platform Engineering. You’ll shape the security roadmap and own the delivery of complex initiatives, protecting our marketplace and customers.

The role focuses on application and cloud security, secure software delivery and risks in internal and AI-enabled systems, combining deep technical work with influence across engineering teams.