Staff / Senior Staff Security Engineer – Vinted Go

About the role

As a Staff or Senior Staff Security Engineer you will be the first dedicated security professional inside Vinted Go, the logistics arm of Vinted. You will own the security posture of a European‑scale logistics network that blends software, physical infrastructure and dozens of external partners.

Key responsibilities

• Define and execute the Vinted Go security roadmap, assessing the estate, prioritising real attack paths and closing high‑impact gaps.
• Stand up a Security Ops capability for detection, response and vulnerability management, leveraging central platforms.
• Embed secure development practices across Vinted Go engineering and external partners.
• Manage third‑party security for 40+ carriers, hardware vendors and outsourced engineering teams.
• Maintain the risk register, drive mitigation decisions and represent Vinted Go in group security governance.

Required profile

• Strong hands‑on security engineering experience, able to threat‑model systems, find attack paths and build fixes.
• Proven experience building or significantly maturing a security capability, including detection and response.
• Evidence‑based working style that engineers respect – focus on attack paths, fixes and measurable outcomes.
• Excellent written and spoken English.

Required skills

• Threat modeling
• Security operations and vulnerability management
• Detection and response tooling
• Cloud‑native security (Kubernetes)
• Offensive security expertise (e.g., OSCP)
• Third‑party risk management

What we offer

• Share‑options programme
• 25 working days of holiday
• Home‑office equipment budget up to €540
• Private health insurance and employee assistance programme
• Monthly Vinted shopping budget and dog‑friendly office
• Hybrid work model (2 recommended office days per week)
• Learning budget starting at €3,000 and up to 10 paid days for development