Staff / Senior Staff Security Engineer, Vinted Go (Vinted, UAB)
Darbdavys: Vinted, UAB
Miestas: Vilnius
Paskelbta: 2026-10-24
💶 8442 - 14000 €/mėn. Prieš mokesčius · visa darbo diena
Kandidatuoti šaltinyje (cv.lt) →
Job description:
As Staff / Senior Staff Security Engineer in Vinted Go, you will be the first dedicated security engineer inside our logistics business - and the person who makes Vinted Go's security posture match its growth. Vinted Go is a rare security problem in the best sense: a European-scale logistics network where software, physical infrastructure, and dozens of external partners meet. Its attack surface spans shipping services and carrier APIs, a locker and PUDO network in public space, sorting facilities with real operational technology, driver and warehouse applications, and hardware and engineering partners.
Working at staff / senior staff level as an individual contributor embedded in Vinted Go engineering, you will own the security of that whole estate. Vinted Security runs a federated model: the central team sets thresholds and provides core services, while each business unit owns local execution. Vinted Go's local execution is what you will build - this is not a policy or audit role, it is an engineering role with a mandate. You will work directly with Vinted Go's engineering leadership and functionally with the Vinted Security senior team and your security peers in Marketplace and Vinted Pay.
This is a build role with room to grow: you start hands-on, closing the highest-impact gaps yourself, and as the function matures you will stand up and functionally lead a Vinted Go Security Ops capability.
Own the Vinted Go security roadmap end to end: assess the estate, prioritise by real attack paths, and drive risks to closure - with the explicit goal of keeping Vinted Go's resilience to external attack ahead of its growth and at the standard Vinted holds itself to.
Secure a physical-digital surface few companies have: carrier integrations, locker and PUDO hardware, sorting-facility operational technology (conveyors, robotics, cameras), driver and warehouse applications, and electronics verification related software and hardware.
Stand up Vinted Go's Security Ops capability - detection, response, and vulnerability management for Vinted Go-specific systems - building on central platforms rather than duplicating them.
Embed secure development into Vinted Go engineering, including external engineering partners, so security lands at design time rather than after deployment.
Own third-party security across the network: 60+ carriers, hardware vendors, and outsourced engineering - set the requirements, verify them, and manage the residual risk.
Act as the technical arm of the person accountable for Vinted Go’s security: maintain the risk register, prepare mitigation-or-acceptance decisions against centrally set thresholds, and represent Vinted Go in the group's security governance.
Raise the security fluency of Vinted Go engineers so risk-based decisions happen well without you in the room - security as a delivery enabler, not a gate.
Requirements:
Strong hands-on security engineering experience - you can threat-model a system, find the attack…
As Staff / Senior Staff Security Engineer in Vinted Go, you will be the first dedicated security engineer inside our logistics business - and the person who makes Vinted Go's security posture match its growth. Vinted Go is a rare security problem in the best sense: a European-scale logistics network where software, physical infrastructure, and dozens of external partners meet. Its attack surface spans shipping services and carrier APIs, a locker and PUDO network in public space, sorting facilities with real operational technology, driver and warehouse applications, and hardware and engineering partners.
Working at staff / senior staff level as an individual contributor embedded in Vinted Go engineering, you will own the security of that whole estate. Vinted Security runs a federated model: the central team sets thresholds and provides core services, while each business unit owns local execution. Vinted Go's local execution is what you will build - this is not a policy or audit role, it is an engineering role with a mandate. You will work directly with Vinted Go's engineering leadership and functionally with the Vinted Security senior team and your security peers in Marketplace and Vinted Pay.
This is a build role with room to grow: you start hands-on, closing the highest-impact gaps yourself, and as the function matures you will stand up and functionally lead a Vinted Go Security Ops capability.
Own the Vinted Go security roadmap end to end: assess the estate, prioritise by real attack paths, and drive risks to closure - with the explicit goal of keeping Vinted Go's resilience to external attack ahead of its growth and at the standard Vinted holds itself to.
Secure a physical-digital surface few companies have: carrier integrations, locker and PUDO hardware, sorting-facility operational technology (conveyors, robotics, cameras), driver and warehouse applications, and electronics verification related software and hardware.
Stand up Vinted Go's Security Ops capability - detection, response, and vulnerability management for Vinted Go-specific systems - building on central platforms rather than duplicating them.
Embed secure development into Vinted Go engineering, including external engineering partners, so security lands at design time rather than after deployment.
Own third-party security across the network: 60+ carriers, hardware vendors, and outsourced engineering - set the requirements, verify them, and manage the residual risk.
Act as the technical arm of the person accountable for Vinted Go’s security: maintain the risk register, prepare mitigation-or-acceptance decisions against centrally set thresholds, and represent Vinted Go in the group's security governance.
Raise the security fluency of Vinted Go engineers so risk-based decisions happen well without you in the room - security as a delivery enabler, not a gate.
Requirements:
Strong hands-on security engineering experience - you can threat-model a system, find the attack…