2 days ago
Kaunas, LithuaniaStaff+
Responsibilities
- Own the Vinted Go security roadmap, assess the estate, prioritize attack paths, and drive risks to closure.
- Secure carrier integrations, locker and PUDO hardware, sorting-facility operational technology, driver and warehouse applications, and electronics verification systems.
- Establish Vinted Go’s Security Operations capability covering detection, response, and vulnerability management.
- Embed secure development practices across Vinted Go engineering and external engineering partners.
- Own third-party security requirements, verification, and residual-risk management for carriers, hardware vendors, and outsourced engineering partners.
- Maintain the security risk register, prepare mitigation-or-acceptance decisions, and represent Vinted Go in group security governance.
- Improve security fluency among Vinted Go engineers and functionally lead the Security Operations capability as it matures.
Requirements
- Strong hands-on security engineering experience, including threat modeling, attack-path discovery, and driving or building fixes across offensive and defensive security.
- Experience building or significantly maturing a security capability.
- Experience building or operating security operations for production systems, including detection and response.
- Excellent written and spoken English.
- Experience securing logistics, supply chain, retail, manufacturing, or other software-and-physical-infrastructure environments is advantageous.
- Third-party or supply-chain security experience across many external integrations is advantageous.
- Offensive security experience or certifications such as OSCP, or cloud-native security depth including Kubernetes, is advantageous.
Benefits
- Share options programme.
- 25 working days of holiday.
- Tools and technology needed for work.
- Home-office IT equipment and up to €540 for home workplace furniture.
- Private health insurance and a confidential Employee Assistance Program for employees and families.
- Frequent team-building events, a personal monthly Vinted shopping budget, and dog-friendly offices.
- Vilnius office gym and in-house meals; Kaunas office monthly lunch allowance and weekly provided lunch and breakfast.
- Workation policy allowing remote work for up to 90 days per year in the EU, including up to 21 days globally, with stated provisions for non-EU citizens.
- Annual learning budget starting at €3,000 and up to 10 working days over two years for development.
- Hybrid work model with two recommended office days per week.
Tech Stack
Categories
About Vinted
Vinted runs a consumer-to-consumer marketplace and app for buying and selling second-hand fashion and related items across Europe. It monetizes through transaction-related fees, buyer protection, and shipping services, and also operates Vinted Go for logistics and Vinted Pay for payments. Founded in 2008 and headquartered in Vilnius, Lithuania, the platform serves members in 20+ European markets.