Staff / Senior Staff Security Engineer, Vinted Go

As Staff / Senior Staff Security Engineer in Vinted Go, you will be the first dedicated security engineer inside our logistics business - and the person who makes Vinted Go's security posture match its growth. Vinted Go is a rare security problem in the best sense: a European-scale logistics network where software, physical infrastructure, and dozens of external partners meet. Its attack surface spans shipping services and carrier APIs, a locker and PUDO network in public space, sorting facilities with real operational technology, driver and warehouse applications, and hardware and engineering partners.

Working at staff / senior staff level as an individual contributor embedded in Vinted Go engineering, you will own the security of that whole estate. Vinted Security runs a federated model: the central team sets thresholds and provides core services, while each business unit owns local execution. Vinted Go's local execution is what you will build - this is not a policy or audit role, it is an engineering role with a mandate. You will work directly with Vinted Go's engineering leadership and functionally with the Vinted Security senior team and your security peers in Marketplace and Vinted Pay.

This is a build role with room to grow: you start hands-on, closing the highest-impact gaps yourself, and as the function matures you will stand up and functionally lead a Vinted Go Security Ops capability.

• Own the Vinted Go security roadmap end to end: assess the estate, prioritise by real attack paths, and drive risks to closure - with the explicit goal of keeping Vinted Go's resilience to external attack ahead of its growth and at the standard Vinted holds itself to.
• Secure a physical-digital surface few companies have: carrier integrations, locker and PUDO hardware, sorting-facility operational technology (conveyors, robotics, cameras), driver and warehouse applications, and electronics verification related software and hardware.
• Stand up Vinted Go's Security Ops capability - detection, response, and vulnerability management for Vinted Go-specific systems - building on central platforms rather than duplicating them.
• Embed secure development into Vinted Go engineering, including external engineering partners, so security lands at design time rather than after deployment.
• Own third-party security across the network: 40+ carriers, hardware vendors, and outsourced engineering - set the requirements, verify them, and manage the residual risk.
• Act as the technical arm of Vinted Go's security accountable: maintain the risk register, prepare mitigation-or-acceptance decisions against centrally set thresholds, and represent Vinted Go in the group's security governance.
• Raise the security fluency of Vinted Go engineers so risk-based decisions happen well without you in the room - security as a delivery enabler, not a gate.

• Strong hands-on security engineering experience - you can threat-model a system, find the attack path yourself, and drive or build the fix; you've worked on both the offensive and defensive side.
• Experience building or significantly maturing a security capability.
• Experience with detection and response - you have built or operated security operations for production systems.
• A way of working that engineers respect: evidence over assertions, attack paths over checklists, fixes over findings.
• Pragmatic evangelist for all things security.
• Excellent written and spoken English.

Nice to have

• Advantage: experience securing logistics, supply chain, retail, manufacturing, or other environments where software and physical infrastructure overlaps.
• Advantage: third-party / supply-chain security experience across many external integrations.
• Advantage: offensive security background or certifications (e.g. OSCP), or cloud-native (Kubernetes) security depth.

• The opportunity to benefit from our share options programme
• 25 working days of holiday
• Access to all the tools & tech needed for work
• Home office support: we provide IT workstation equipment and a personal budget of up to 540 for home workplace furniture
• Private health insurance
• Confidential Employee Assistance Program (EAP) for you and your family
• Frequent team-building events
• A personal monthly budget for shopping on Vinted
• A dog-friendly office
• In Vilnius office: Gym & in-house meals at friendly prices
• In Kaunas office: a monthly lunch allowance, and a once-a-week provided in-house lunch and breakfast