7 days ago
Vilnius, LithuaniaStaff+
Responsibilities
- Own and drive a multi-quarter Vinted Pay security roadmap based on real attack paths and exposure.
- Translate PCI DSS, DORA, and Bank of Lithuania and FCA requirements into automated security controls and engineering guardrails.
- Review and improve AWS infrastructure, payment pipelines, SIEM and logging, vulnerability management, payment-page isolation, encryption, and least-privilege access.
- Lead cross-functional security initiatives and personally write code or implement fixes where required.
- Maintain the security risk register, prepare mitigation-or-acceptance decisions, and represent Vinted Pay in group security governance.
- Embed secure development practices into Payments Engineering and improve engineers’ security fluency.
Requirements
- Strong hands-on security engineering experience built on experience running large production systems.
- Experience in regulated payments or fintech under PCI DSS and a financial regulator such as the FCA, Bank of Lithuania, CSSF, or equivalent.
- Staff- or principal-level experience defining, leading, and delivering major company-wide technical initiatives on high-scale distributed systems.
- Ability to work across technical leadership, architecture, problem solving, and executive partnership while influencing without authority.
- Experience translating technical risk into business consequences for senior internal and external audiences.
- Familiarity with Ruby on Rails, Go, MySQL, Temporal, AWS, SIEM, and CSPM tooling, or willingness to learn them.
- Excellent written and spoken English.
- Preferred qualifications include experience at massive scale, deep knowledge of Kibana, Grafana, and Prometheus, AWS security depth including IAM and KMS, hands-on Wiz or SIEM engineering, privacy engineering, offensive security, or OSCP certification.
Benefits
- Share options programme.
- 25 working days of holiday.
- IT workstation equipment and up to €540 for home workplace furniture.
- Private health insurance and confidential Employee Assistance Program for employees and families.
- Frequent team-building events, a monthly Vinted shopping budget, and dog-friendly offices.
- Vilnius office gym and in-house meals at friendly prices; Kaunas office lunch allowance and weekly provided lunch and breakfast.
- Workation policy allows remote work up to 90 days per year in the EU, including up to 21 global days, with separate provisions for non-EU citizens.
- Annual learning budget starting at €3,000 and up to 10 working days over two years for development.
- Hybrid work with two recommended office days per week.
About Vinted
Vinted runs a consumer-to-consumer marketplace and app for buying and selling second-hand fashion and related items across Europe. It monetizes through transaction-related fees, buyer protection, and shipping services, and also operates Vinted Go for logistics and Vinted Pay for payments. Founded in 2008 and headquartered in Vilnius, Lithuania, the platform serves members in 20+ European markets.