Security engineer in logistics

Vinted; Amsterdam; Hybrid; EUR 122,000 - 205,000; Full time

Benefits offered by this job

Share options

25 days annual leave

Newest MacBook models

Home office support €540 budget

Lunch allowance

Company bike leasing

Job summary

Vinted Go ищет опытного Staff/Senior Staff Security Engineer, чтобы занять первую инженерную позицию по безопасности в логистическом бизнесе. Вы будете формировать дорожную карту, разворачивать Security Ops и внедрять безопасность в разработку и цепочку поставок.

Роль предполагает взаимодействие с множеством внешних партнеров и оборудованием, включая робототехнику и IoT. Требуется опытThreat-моделирования, построения или роста security capability, а также сильные навыки на английском языке.

Qualifications

• УмеетеThreat-моделировать систему и находить пути атаки.
• Опыт создания или значительного развития capability в области кибербезопасности.
• Опыт работы в операциях безопасности production-систем.
• Стратегическое мышление и прагматичный подход к внедрению безопасности.

Responsibilities

• Веди дорожную карту безопасности Vinted Go от идеи до реализации, оценивая активы и риски.
• Строить или развивать Security Ops: обнаружение, реагирование и управление уязвимостями.
• Встраивать безопасность в разработку и внешних партнеров, чтобы безопасность закладывалась на этапе проектирования.
• Управлять безопасностью третьих сторон: требования, верификация и снижение остаточного риска.
• Служить техническим pillar для ответственного за безопасность лица и представлять Vinted Go в governance группы.

Skills

Threat modeling

Security operations

Security architecture

English language

Logistics security

Tools

Kubernetes

Job description

Описание

As Staff / Senior Staff Security Engineer in Vinted Go, you will be the first dedicated security engineer inside our logistics business - and the person who makes Vinted Go's security posture match its growth. Vinted Go is a rare security problem in the best sense: a European-scale logistics network where software, physical infrastructure, and dozens of external partners meet.

Задачи

Own the Vinted Go security roadmap end to end: assess the estate, prioritise by real attack paths, and drive risks to closure - with the explicit goal of keeping Vinted Go's resilience to external attack ahead of its growth and at the standard Vinted holds itself to. Secure a physical-digital surface few companies have: carrier integrations, locker and PUDO hardware, sorting-facility operational technology (conveyors, robotics, cameras), driver and warehouse applications, and electronics verification related software and hardware. Stand up Vinted Go's Security Ops capability - detection, response, and vulnerability management for Vinted Go-specific systems - building on central platforms rather than duplicating them. Embed secure development into Vinted Go engineering, including external engineering partners, so security lands at design time rather than after deployment. Own third-party security across the network: 60+ carriers, hardware vendors, and outsourced engineering - set the requirements, verify them, and manage the residual risk. Act as the technical arm of the person accountable for Vinted Go's security: maintain the risk register, prepare mitigation-or-acceptance decisions against centrally set thresholds, and represent Vinted Go in the group's security governance. Raise the security fluency of Vinted Go engineers so risk-based decisions happen well without you in the room - security as a delivery enabler, not a gate.

Требования

Strong hands-on security engineering experience - you can threat-model a system, find the attack path yourself, and drive or build the fix; you've worked on both the offensive and defensive side. Experience building or significantly maturing a security capability. Experience with detection and response - you have built or operated security operations for production systems. A way of working that engineers respect: evidence over assertions, attack paths over checklists, fixes over findings. Pragmatic evangelist for all things security. Excellent written and spoken English. Будет плюсом: Experience securing logistics, supply chain, retail, manufacturing, or other environments where software and physical infrastructure overlaps; Third-party / supply-chain security experience across many external integrations; Offensive security background or certifications (e.g. OSCP), or cloud-native (Kubernetes) security depth

Условия

The opportunity to benefit from our share options programme 25 days of paid annual leave Newest MacBook models Confidential Employee Assistance Program (EAP) for you and your family Frequent team-building events Home office support: we provide IT workstation equipment and a personal budget of up to €540 for home workplace furniture A daily lunch allowance Company bike leasing scheme Monthly budget for a flexible benefits platform Work from Home allowance Collective Defined Contribution Pension plan A personal monthly budget for shopping on Vinted An NS Business Card A dog-friendly office Up to 90 days per year in the EU, of these, 21 days can be spent globally. For non-EU citizens, it's 21 days worldwide. Each year, you'll be given a learning budget (starting at €3,000), and a total of up to 10 working days over a 2-year period to support your personal and professional development. Our hybrid model, with 2 recommended office days a week, gives you and your team the flexibility to decide if and when you want to work from home, and when to catch up in person. The annual gross salary range for this position excluding 8% holiday pay is: €121.600-€205.200 EUR