4 days ago
Vilnius, LithuaniaStaff+
Responsibilities
- Own the end-to-end IT security roadmap, threat-model the workplace estate, prioritize attack paths, and drive risks to closure.
- Secure Vinted’s managed Mac, Windows, and Linux device fleet across its lifecycle, including hardening, least privilege, EDR, and device trust.
- Engineer workforce identity and access controls, including phishing-resistant authentication, joiner-mover-leaver automation, privileged access, and time-bound contractor access.
- Secure the SaaS and business-application estate, including configuration baselines, OAuth and API integrations, data flows, shadow IT, and shadow AI.
- Secure office networks, remote access, warehouse technology, electronics verification centres, and other physical-site infrastructure.
- Automate security controls, build compliance as code, maintain the risk register, and represent IT in security governance.
- Build and mature Vinted IT’s security engineering practice while raising security fluency across IT and the wider workforce.
Requirements
- Deep hands-on experience securing corporate IT estates at scale across endpoints, device management, workforce identity and access, SaaS, and business applications.
- Engineering experience applying automation, scripting with Python, Go, or similar, identity and infrastructure as code, and product-oriented security controls.
- Experience building a security practice from scratch within an IT or infrastructure organization.
- Experience securing networks and devices in physical sites such as warehouses, labs, verification centres, or repair centres, or willingness to develop this capability.
- Ability to influence without authority and communicate technical risk as business consequences to senior audiences.
- Excellent written and spoken English.
- Experience with Okta, Jamf, Google Workspace, Atlassian, Workato, or equivalent tools is advantageous.
- Hardware and device security experience involving firmware, secure boot, device attestation, peripheral and USB threats, or EDR engineering is advantageous.
- Offensive security or certifications such as OSCP, identity and endpoint detection engineering, or ISO 27001/NIS2 workplace-scope implementation experience is advantageous.
Benefits
- Share options programme.
- 25 working days of holiday.
- Work tools and technology provided.
- Home-office workstation equipment and up to €540 for home workplace furniture.
- Private health insurance.
- Confidential Employee Assistance Program for the employee and family.
- Frequent team-building events and a monthly Vinted shopping budget.
- Dog-friendly office, with gym and in-house meals in Vilnius and lunch benefits in Kaunas.
- Remote workation policy of up to 90 days per year in the EU, including up to 21 global days; non-EU citizens receive 21 worldwide days.
- Annual learning budget starting at €3,000 and up to 10 working days over two years for development.
- Hybrid work model with two recommended office days per week.
About Vinted
Vinted runs a consumer-to-consumer marketplace and app for buying and selling second-hand fashion and related items across Europe. It monetizes through transaction-related fees, buyer protection, and shipping services, and also operates Vinted Go for logistics and Vinted Pay for payments. Founded in 2008 and headquartered in Vilnius, Lithuania, the platform serves members in 20+ European markets.