3 days ago
Amsterdam, NetherlandsStaff+
Responsibilities
- Own the Vinted Go security roadmap, assess attack paths, prioritize risks, and drive remediation to closure.
- Secure carrier integrations, locker and PUDO hardware, sorting-facility operational technology, applications, and electronics verification systems.
- Build Vinted Go’s security operations capability covering detection, response, and vulnerability management.
- Embed secure development and threat modeling into Vinted Go engineering and external engineering partnerships.
- Own third-party security requirements, verification, and residual-risk management across carriers and hardware and engineering vendors.
- Maintain the risk register, prepare mitigation-or-acceptance decisions, and represent Vinted Go in security governance.
- Improve security fluency among Vinted Go engineers through pragmatic, risk-based guidance.
Requirements
- Strong hands-on security engineering experience, including threat modeling, identifying attack paths, and driving or implementing fixes across offensive and defensive security.
- Experience building or significantly maturing a security capability.
- Experience building or operating detection and response for production systems.
- Excellent written and spoken English.
- Experience in logistics, supply chain, retail, manufacturing, or environments combining software and physical infrastructure is advantageous.
- Third-party or supply-chain security experience across many external integrations is advantageous.
- An offensive security background or certifications such as OSCP, or cloud-native security depth including Kubernetes, is advantageous.
Benefits
- Share options programme, 25 days of paid annual leave, a daily lunch allowance, and a collective defined contribution pension plan.
- Newest MacBook models, IT workstation equipment, and up to €540 for home workplace furniture.
- Confidential Employee Assistance Program for the employee and family, frequent team-building events, company bike leasing, flexible benefits budget, Work from Home allowance, personal monthly Vinted shopping budget, and an NS Business Card.
- Dog-friendly office and hybrid work with two recommended office days per week.
- Workation policy allowing remote work for up to 90 days per year in the EU, including up to 21 days globally, with separate provisions for non-EU citizens.
- Annual learning budget starting at €3,000 and up to 10 working days over two years for professional development.
Tech Stack
Categories
About Vinted
Vinted runs a consumer-to-consumer marketplace and app for buying and selling second-hand fashion and related items across Europe. It monetizes through transaction-related fees, buyer protection, and shipping services, and also operates Vinted Go for logistics and Vinted Pay for payments. Founded in 2008 and headquartered in Vilnius, Lithuania, the platform serves members in 20+ European markets.