3 days ago
Vilnius, LithuaniaStaff+
Responsibilities
- Own the Vinted Go security roadmap, assess attack paths, prioritize risks, and drive mitigations to closure.
- Secure carrier integrations, locker and PUDO hardware, sorting-facility operational technology, driver and warehouse applications, and related software and hardware.
- Build Vinted Go’s Security Operations capability covering detection, response, and vulnerability management.
- Embed secure development practices into Vinted Go engineering and external engineering partners.
- Own third-party security requirements, verification, and residual-risk management across carriers, hardware vendors, and outsourced engineering.
- Maintain the risk register, prepare mitigation-or-acceptance decisions, and represent Vinted Go in security governance.
- Improve security fluency among Vinted Go engineers.
Requirements
- Strong hands-on security engineering experience, including threat modeling, identifying attack paths, and driving or building fixes.
- Experience building or significantly maturing a security capability.
- Experience building or operating production security operations involving detection and response.
- Excellent written and spoken English.
- Experience securing logistics, supply chain, retail, manufacturing, or other software-and-physical-infrastructure environments is advantageous.
- Third-party or supply-chain security experience across numerous external integrations is advantageous.
- Offensive security experience or certifications such as OSCP, or cloud-native Kubernetes security expertise, is advantageous.
Benefits
- Share options programme.
- 25 working days of holiday.
- Tools and technology needed for work.
- Home-office IT equipment and up to €540 for home workplace furniture.
- Private health insurance and a confidential Employee Assistance Program for the employee and family.
- Frequent team-building events, a personal monthly Vinted shopping budget, and dog-friendly offices.
- Vilnius office gym and in-house meals at friendly prices; Kaunas office monthly lunch allowance and weekly provided lunch and breakfast.
- Hybrid work with two recommended office days per week.
- Workation policy allowing remote work for up to 90 days per year in the EU, including up to 21 global days, with 21 worldwide days for non-EU citizens.
- Annual learning budget starting at €3,000 and up to 10 working days over two years for development.
Tech Stack
Categories
About Vinted
Vinted runs a consumer-to-consumer marketplace and app for buying and selling second-hand fashion and related items across Europe. It monetizes through transaction-related fees, buyer protection, and shipping services, and also operates Vinted Go for logistics and Vinted Pay for payments. Founded in 2008 and headquartered in Vilnius, Lithuania, the platform serves members in 20+ European markets.