2 days ago
Vilnius, LithuaniaStaff+
Responsibilities
- Own and execute a multi-quarter security roadmap for Vinted Pay’s infrastructure, payment assets, wallets, and sensitive data.
- Translate PCI DSS, DORA, Bank of Lithuania, and FCA requirements into automated security controls and engineering guardrails.
- Review and improve AWS infrastructure, payment pipelines, SIEM and logging, and vulnerability management tooling such as Wiz.
- Own payment page isolation, script monitoring, encryption, least-privilege access, and PCI DSS evidence architecture across multi-region environments.
- Lead cross-functional security initiatives and drive delivery through Payments Platform, Payments Engineering, and Group Security.
- Maintain the security risk register, prepare mitigation or acceptance decisions, and represent Vinted Pay in security governance.
- Embed secure development into Payments Engineering and improve engineers’ security fluency.
Requirements
- Strong hands-on security engineering experience built on experience running large production systems, including threat modeling payment flows and implementing fixes.
- Experience in regulated payments or fintech under PCI DSS and a financial regulator such as the FCA, Bank of Lithuania, CSSF, or equivalent.
- Staff- or principal-level experience defining, leading, and delivering major company-wide technical initiatives on high-scale distributed systems.
- Ability to operate as a technical lead, architect, solver, and right hand while influencing without authority and communicating technical risk to senior audiences.
- Familiarity with Ruby on Rails, Go, MySQL, Temporal, AWS, SIEM, and CSPM tooling, or willingness to learn them.
- Excellent written and spoken English.
- Preferred experience includes systems operating at massive scale, observability tooling such as Kibana, Grafana, and Prometheus, AWS security architecture, CSPM or SIEM engineering, privacy engineering, offensive security, or OSCP certification.
Benefits
- Share options programme, private health insurance, Employee Assistance Program, team-building events, and a monthly Vinted shopping budget.
- 25 working days of holiday and access to required work technology.
- Home office equipment and a personal budget of up to €540 for home workplace furniture.
- Hybrid work with two recommended office days per week.
- Workation policy allowing remote work for up to 90 days per year in the EU, including up to 21 days globally for eligible workers.
- Annual learning budget starting at €3,000 and up to 10 working days over two years for development.
- Vilnius office gym and in-house meals, or Kaunas office lunch allowance and weekly provided lunch and breakfast.
- Dog-friendly office.
About Vinted
Vinted runs a consumer-to-consumer marketplace and app for buying and selling second-hand fashion and related items across Europe. It monetizes through transaction-related fees, buyer protection, and shipping services, and also operates Vinted Go for logistics and Vinted Pay for payments. Founded in 2008 and headquartered in Vilnius, Lithuania, the platform serves members in 20+ European markets.