6 days ago
Kaunas, LithuaniaStaff+
Responsibilities
- Own and prioritize Vinted Pay’s multi-quarter security roadmap based on real attack paths and exposure.
- Translate PCI DSS, DORA, Bank of Lithuania, and FCA requirements into automated security controls and engineering guardrails.
- Review and improve AWS infrastructure, payment pipelines, SIEM and logging, vulnerability management, payment-page isolation, encryption, and least-privilege access.
- Lead security initiatives across Payments Platform, Payments Engineering, and Group Security, writing code or driving partner teams to delivery.
- Maintain the risk register, prepare mitigation-or-acceptance decisions, and represent Vinted Pay in security governance.
- Embed secure development practices into Payments Engineering and improve engineers’ security fluency.
Requirements
- Strong hands-on security engineering experience combined with experience building or running large production systems.
- Experience in regulated payments or fintech under PCI DSS and a financial regulator such as the FCA, Bank of Lithuania, CSSF, or equivalent.
- Staff- or principal-level experience defining, leading, and delivering major company-wide technical initiatives.
- Ability to operate as a technical lead, architect, solver, and trusted partner to engineering leadership while influencing without authority.
- Experience translating technical risk into business consequences for senior internal and external audiences.
- Familiarity with Ruby on Rails, Go, MySQL, Temporal, AWS, SIEM, and CSPM tooling, or willingness to learn them.
- Excellent written and spoken English.
- Preferred experience includes systems operating at massive scale, observability tooling such as Kibana, Grafana, and Prometheus, AWS security architecture, hands-on Wiz or SIEM engineering, privacy engineering, and offensive security certifications such as OSCP.
Benefits
- Share options programme, private health insurance, Employee Assistance Program, team-building events, and a monthly Vinted shopping budget.
- 25 working days of holiday and home-office equipment plus up to €540 for workplace furniture.
- Hybrid work with two recommended office days per week.
- Workation policy allowing remote work for up to 90 days per year in the EU, including up to 21 days globally, with separate provisions for non-EU citizens.
- Annual learning budget starting at €3,000 and up to 10 working days over two years for development.
- Vilnius office gym and in-house meals; Kaunas office lunch allowance and weekly provided lunch and breakfast.
- Dog-friendly office and access to required work tools and technology.
About Vinted
Vinted runs a consumer-to-consumer marketplace and app for buying and selling second-hand fashion and related items across Europe. It monetizes through transaction-related fees, buyer protection, and shipping services, and also operates Vinted Go for logistics and Vinted Pay for payments. Founded in 2008 and headquartered in Vilnius, Lithuania, the platform serves members in 20+ European markets.