2 days ago
Kaunas, LithuaniaStaff+
Responsibilities
- Own the IT security roadmap, threat model the workplace estate, prioritize attack paths, and drive risks to closure.
- Secure Vinted’s Mac-first device fleet and Windows and Linux endpoints through hardened baselines, least privilege, endpoint detection and response, and device trust.
- Secure workforce identity through phishing-resistant authentication, joiner-mover-leaver automation, role-based and privileged access, and time-bound contractor access.
- Own security for the SaaS and business-application estate, including configuration baselines, OAuth and API integrations, data flows, shadow IT, and shadow AI.
- Secure office networks, remote access, warehouse infrastructure, electronics verification centres, and other physical-site hardware.
- Build security automation, controls, compliance-as-code processes, risk registers, and governance evidence.
- Raise security fluency across IT and functionally lead the developing IT security engineering capability.
Requirements
- Deep hands-on experience securing corporate IT estates at scale across endpoints, device management, workforce identity and access, SaaS, and business applications.
- Engineering experience with automation, scripting in Python, Go, or similar, identity management, infrastructure as code, and product-oriented security controls.
- Ability to build a security practice from scratch within an IT or infrastructure organization and operate in a low-maturity environment.
- Experience securing networks and devices in physical sites such as warehouses, labs, verification centres, or repair centres, or willingness to develop that experience.
- Ability to influence without authority and communicate technical risk as business impact to senior audiences.
- Excellent written and spoken English.
- Preferred experience with Okta, Jamf, Google Workspace, Atlassian, Workato, or equivalent technologies.
- Preferred depth in firmware and secure boot, device attestation, peripheral and USB threats, EDR engineering, offensive security, detection engineering, OSCP, ISO 27001, or NIS2.
Benefits
- Share options programme, private health insurance, Employee Assistance Program, team-building events, a personal monthly Vinted shopping budget, and dog-friendly offices.
- 25 working days of holiday and access to required work tools and technology.
- Home-office workstation equipment and a personal budget of up to €540 for home workplace furniture.
- Workation policy allowing remote work for up to 90 days per year in the EU, including up to 21 global days, with a 21-day worldwide allowance for non-EU citizens.
- Hybrid work model with two recommended office days per week.
- Annual learning budget starting at €3,000 and up to 10 working days over two years for professional development.
- Vilnius office gym and in-house meals; Kaunas monthly lunch allowance and weekly provided lunch and breakfast.
About Vinted
Vinted runs a consumer-to-consumer marketplace and app for buying and selling second-hand fashion and related items across Europe. It monetizes through transaction-related fees, buyer protection, and shipping services, and also operates Vinted Go for logistics and Vinted Pay for payments. Founded in 2008 and headquartered in Vilnius, Lithuania, the platform serves members in 20+ European markets.