Senior Staff Security Engineer — Fintech Payments

Vinteden; London; Hybrid; NOK 1,231,000 - 2,129,000; Full time

Benefits offered by this job

Share options program

25 working days holiday

MacBook laptops

Home office budget €540

Employee Assistance Program (EAP)

Medical Insurance

Group Life Insurance

Pension match

Gym membership discount

Lunch benefit

Job summary

Vinted seeks a staff/senior staff Security Engineer for Vinted Pay to scale security across a growing fintech platform. You’ll translate regulatory requirements into practical guardrails, own PCI DSS and data protection architecture, and collaborate with Payments Platform, Engineering, and Group Security to embed secure development.

This hands-on role starts by closing high-impact gaps and grows into leading security initiatives across AWS infrastructure and payment flows.

Qualifications

• Strong hands-on security engineering experience on a real engineering foundation.
• Experience in regulated payments or fintech with PCI DSS/FCA exposure.
• Staff- or principal-level track record delivering major security initiatives.
• Excellent written and spoken English.

Responsibilities

• Own the Vinted Pay security roadmap end to end and drive risk closure.
• Translate regulatory requirements into engineering guardrails and controls.
• Identify and close operational security blind spots across AWS, payment pipelines, and logging.
• Own PCI DSS and data protection architecture across multi-region environments.
• Lead cross-functional security initiatives with Payments Platform, Engineering, and Group Security.
• Be the technical arm of security accountability and maintain the risk register.

Skills

Security engineering

Regulated payments/fintech

Leadership without authority

English communication

AWS security depth

Threat modelling

Tools

Ruby on Rails

Go

MySQL

Temporal

AWS

SIEM

CSPM (Wiz)

Job description

Vinted seeks a staff/senior staff Security Engineer for Vinted Pay to scale security across a growing fintech platform. You’ll translate regulatory requirements into practical guardrails, own PCI DSS and data protection architecture, and collaborate with Payments Platform, Engineering, and Group Security to embed secure development.

This hands-on role starts by closing high-impact gaps and grows into leading security initiatives across AWS infrastructure and payment flows.