Staff Security Engineer (Senior) – Payments

About the role

As a Staff / Senior Staff Security Engineer for Vinted Pay, you will own the security posture of our regulated payments business, ensuring that security is built into the core financial architecture as we scale across Europe. You will work as an individual contributor within the Payments Engineering leadership team, translating regulatory requirements into technical guardrails and driving practical controls alongside platform engineers.

Key responsibilities

• Own the Vinted Pay security roadmap end‑to‑end, assess the estate and prioritise real attack paths.
• Translate PCI DSS, DORA and local regulator requirements into automated security controls and engineering guardrails.
• Conduct deep technical reviews of AWS infrastructure, payment pipelines, SIEM and vulnerability‑management tooling, and remediate findings based on exposure.
• Lead cross‑functional security initiatives and act as the technical security accountable for Vinted Pay.
• Embed secure development practices into Payments engineering and raise the security fluency of engineers.

Required profile

• Strong hands‑on security engineering experience on large production systems.
• Experience working in regulated payments or fintech under PCI DSS and a financial regulator.
• Track record at staff or principal level delivering company‑wide technical initiatives.
• Ability to influence without authority and communicate risk to senior audiences.
• Comfortable with Vinted’s tech stack or eager to learn.

Required skills

• Ruby on Rails
• Go
• MySQL
• Temporal
• AWS (IAM, KMS, multi‑account, multi‑region)
• SIEM tooling
• CSPM tooling (e.g., Wiz)
• Observability tools such as Kibana, Grafana, Prometheus

What we offer

• Share options programme
• 25 vacation days
• Home office equipment and €540 furniture budget
• Private health insurance
• Employee Assistance Program
• Team‑building events
• Monthly Vinted shopping budget
• Dog‑friendly office
• Gym and in‑house meals in Vilnius office
• Workation policy up to 90 days per year