4 hours ago
Amsterdam, NetherlandsStaff+
Responsibilities
- Shape the security engineering roadmap and lead complex initiatives through implementation and operation.
- Design and build security controls and automation across applications, cloud infrastructure, identity and access, CI/CD, and infrastructure as code.
- Lead threat modeling, secure code reviews, and secure design reviews with engineering teams.
- Investigate vulnerabilities, prioritize remediation, and build reusable controls to prevent recurring weaknesses.
- Improve dependency and secret scanning, reduce false positives, and make findings easier for developers to resolve.
- Contribute to security incident investigations and response while improving detection and response tooling.
- Mentor security engineers and help product engineers develop security skills through guidance, documentation, and training.
- Collaborate with Legal, IT, and Trust & Safety on technical controls, policies, and audit evidence.
- Measure control effectiveness and communicate progress, technical decisions, and remaining risks to stakeholders.
Requirements
- Substantial hands-on security engineering experience in a software or cloud environment with a record of delivering improvements across multiple teams.
- Strong knowledge of application and cloud security, including identity and access management, secrets management, and secure software development.
- Experience leading threat modeling, secure code and design reviews, and complex remediation work.
- Ability to develop or automate in Ruby, Python, Go, or a similar language and review backend code.
- Experience building and operating security tooling or controls in production.
- Experience integrating security into CI/CD, cloud infrastructure, or infrastructure as code.
- Experience contributing to security incident investigations or response.
- Experience leading technical initiatives and mentoring engineers.
- Ability to influence through technical credibility, communicate risks clearly, and drive complex work to completion.
- Helpful experience with Google Cloud, Kubernetes, Terraform or similar infrastructure tooling, marketplace or e-commerce security, account and API security, and AI-enabled application security.
Benefits
- Hybrid working arrangement with a minimum of two office days per week in Amsterdam or Lisbon unless otherwise specified.
- Learning and Development initiatives, development plans, and mentorship programs.
- Inclusive, diverse, and queer-friendly workplace with colleagues representing more than 60 nationalities.
- €100 Catavoucher on joining and €50 Catavoucher on birthdays.
- An extra annual day off to pursue personal passions, plus additional leave for work anniversaries and important life events; benefits may vary by location.
Tech Stack
Categories
About Catawiki
Catawiki operates an online auction marketplace for special objects—art, design, jewelry, classic cars, and collectibles—curated by in-house experts. Buyers bid and sellers list through weekly auctions, with Catawiki earning commissions and fees on completed sales. Founded in 2008 and headquartered in Amsterdam, the privately held company runs thousands of curated auctions each week, with over 100,000 lots offered weekly.