Staff / Senior Staff Security Engineer, Vinted Go

Vinted; Amsterdam; Hybrid; EUR 107,000 - 179,000; Full time

Benefits offered by this job

Share options

25 days annual leave

MacBook laptops

EAP for you and your family

Team events

Home office budget €540

Lunch allowance

Bike leasing

Flexible benefits platform

Work from Home allowance

Pension plan

Shopping budget

NS mobility card

Dog-friendly office

Job summary

Vinted is seeking a Staff / Senior Staff Security Engineer for Vinted Go, the European-scale logistics network. You will own the security of the estate, embedding security into engineering and driving a federated model with central platforms and local execution.

You will build Security Ops, threat-model across complex systems, and manage third‑party risk with external partners. The role emphasizes hands‑on delivery and governance collaboration within a growing security function.

Qualifications

• Strong hands-on security engineering experience that covers threat modeling and remediation.
• Experience building or significantly maturing a security capability.
• Experience with detection and response for production systems.
• A working style privileging evidence, attacker paths, and fixes over findings.
• Pragmatic evangelist for security and its role in delivery.

Responsibilities

• Own the Vinted Go security roadmap end to end, prioritise real attack paths and close risks.
• Secure physical-digital surface including carrier integrations, hardware, conveyors and OT.
• Stand up Vinted Go's Security Ops capability for detection, response, and vulnerability management.
• Embed secure development into Vinted Go engineering and external partners, at design time.
• Own third‑party security across the network with 40+ carriers and vendors.
• Act as the technical arm in security governance and risk mitigation decisions.
• Raise security fluency across engineers to enable risk‑based decisions.

Skills

Threat modeling

Security engineering

Security operations

Secure development

Cloud-native security

Offensive security experience

Third-party / supply chain security

Tools

Kubernetes

Job description

Brief Info About Vinted

Our mission is to make second‑hand the first choice, and we're looking for people who want to help us get there. Every day, we work together to help our members buy and sell pre‑loved clothing and lifestyle items, giving each piece a second life – or even a third.

Brief Info About Vinted

Our mission is to make second‑hand the first choice, and we're looking for people who want to help us get there. Every day, we work together to help our members buy and sell pre‑loved clothing and lifestyle items, giving each piece a second life – or even a third.

Information About The Position

As Staff / Senior Staff Security Engineer in Vinted Go, you will be the first dedicated security engineer inside our logistics business - and the person who makes Vinted Go's security posture match its growth. Vinted Go is a rare security problem in the best sense: a European-scale logistics network where software, physical infrastructure, and dozens of external partners meet. Its attack surface spans shipping services and carrier APIs, a locker and PUDO network in public space, sorting facilities with real operational technology, driver and warehouse applications, and hardware and engineering partners.

Working at staff / senior staff level as an individual contributor embedded in Vinted Go engineering, you will own the security of that whole estate. Vinted Security runs a federated model: the central team sets thresholds and provides core services, while each business unit owns local execution. Vinted Go's local execution is what you will build - this is not a policy or audit role, it is an engineering role with a mandate. You will work directly with Vinted Go's engineering leadership and functionally with the Vinted Security senior team and your security peers in Marketplace and Vinted Pay.

This is a build role with room to grow: you start hands-on, closing the highest-impact gaps yourself, and as the function matures you will stand up and functionally lead a Vinted Go Security Ops capability.

In this position, you’ll

• Own the Vinted Go security roadmap end to end: assess the estate, prioritise by real attack paths, and drive risks to closure - with the explicit goal of keeping Vinted Go's resilience to external attack ahead of its growth and at the standard Vinted holds itself to.
• Secure a physical-digital surface few companies have: carrier integrations, locker and PUDO hardware, sorting-facility operational technology (conveyors, robotics, cameras), driver and warehouse applications, and electronics verification related software and hardware.
• Stand up Vinted Go's Security Ops capability - detection, response, and vulnerability management for Vinted Go-specific systems - building on central platforms rather than duplicating them.
• Embed secure development into Vinted Go engineering, including external engineering partners, so security lands at design time rather than after deployment.
• Own third-party security across the network: 40+ carriers, hardware vendors, and outsourced engineering - set the requirements, verify them, and manage the residual risk.
• Act as the technical arm of Vinted Go's security accountable: maintain the risk register, prepare mitigation-or-acceptance decisions against centrally set thresholds, and represent Vinted Go in the group's security governance.
• Raise the security fluency of Vinted Go engineers so risk-based decisions happen well without you in the room - security as a delivery enabler, not a gate.

About You

• Strong hands-on security engineering experience - you can threat‑model a system, find the attack path yourself, and drive or build the fix; you've worked on both the offensive and defensive side.
• Experience building or significantly maturing a security capability.
• Experience with detection and response - you have built or operated security operations for production systems.
• A way of working that engineers respect: evidence over assertions, attack paths over checklists, fixes over findings.
• Pragmatic evangelist for all things security.
• Excellent written and spoken English.
• Advantage: experience securing logistics, supply chain, retail, manufacturing, or other environments where software and physical infrastructure overlaps.
• Advantage: third‑party / supply‑chain security experience across many external integrations.
• Advantage: offensive security background or certifications (e.g. OSCP), or cloud‑native (Kubernetes) security depth.

Work perks

• The opportunity to benefit from our share options programme
• 25 days of paid annual leave
• Newest MacBook models
• Confidential Employee Assistance Program (EAP) for you and your family
• Frequent team‑building events
• Home office support: we provide IT workstation equipment and a personal budget of up to €540 for home workplace furniture
• A daily lunch allowance
• Company bike leasing scheme
• Monthly budget for a flexible benefits platform
• Work from Home allowance
• Collective Defined Contribution Pension plan
• A personal monthly budget for shopping on Vinted
• An NS mobility card
• A dog‑friendly office

Workation policy

Better balance holidays with workdays by working remotely! Up to 90 days per year in the EU, of these, 21 days can be spent globally. For non‑EU citizens, it's 21 days worldwide. This can be combined with time off for vacation or personal time.

Individual learning budget

Each year, you’ll be given a learning budget (starting at €3,000), and a total of up to 10 working days over a 2‑year period to support your personal and professional development.

Hybrid work

Our hybrid model, with 2 recommended office days a week, gives you and your team the flexibility to decide if and when you want to work from home, and when to catch up in person.

Equal opportunity

We welcome applications from everybody, regardless of your background, identity, or life experiences. Job openings come with guides, not checklists. If you’re excited about a role, but don’t identify with every point in the ‘About you’ section, apply anyway – you might still be the perfect match!

The annual gross salary range for this position excluding 8% holiday pay is:
€107.000—€178.900 EUR