Security engineer in logistics

As Staff / Senior Staff Security Engineer in Vinted Go, you will be the first dedicated security engineer inside our logistics business - and the person who makes Vinted Go's security posture match its growth. Vinted Go is a rare security problem in the best sense: a European-scale logistics network where software, physical infrastructure, and dozens of external partners meet.

• Own the Vinted Go security roadmap end to end: assess the estate, prioritise by real attack paths, and drive risks to closure - with the explicit goal of keeping Vinted Go's resilience to external attack ahead of its growth and at the standard Vinted holds itself to.
• Secure a physical-digital surface few companies have: carrier integrations, locker and PUDO hardware, sorting-facility operational technology (conveyors, robotics, cameras), driver and warehouse applications, and electronics verification related software and hardware.
• Stand up Vinted Go's Security Ops capability - detection, response, and vulnerability management for Vinted Go-specific systems - building on central platforms rather than duplicating them.
• Embed secure development into Vinted Go engineering, including external engineering partners, so security lands at design time rather than after deployment.
• Own third-party security across the network: 60+ carriers, hardware vendors, and outsourced engineering - set the requirements, verify them, and manage the residual risk.
• Act as the technical arm of the person accountable for Vinted Go’s security: maintain the risk register, prepare mitigation-or-acceptance decisions against centrally set thresholds, and represent Vinted Go in the group's security governance.
• Raise the security fluency of Vinted Go engineers so risk-based decisions happen well without you in the room - security as a delivery enabler, not a gate.

• Strong hands-on security engineering experience - you can threat-model a system, find the attack path yourself, and drive or build the fix; you've worked on both the offensive and defensive side.
• Experience building or significantly maturing a security capability.
• Experience with detection and response - you have built or operated security operations for production systems.
• A way of working that engineers respect: evidence over assertions, attack paths over checklists, fixes over findings.
• Pragmatic evangelist for all things security.
• Excellent written and spoken English.
• Будет плюсом: Experience securing logistics, supply chain, retail, manufacturing, or other environments where software and physical infrastructure overlaps; Third-party / supply-chain security experience across many external integrations; Offensive security background or certifications (e.g. OSCP), or cloud-native (Kubernetes) security depth

• The opportunity to benefit from our share options programme
• 25 days of paid annual leave
• Newest MacBook models
• Confidential Employee Assistance Program (EAP) for you and your family
• Frequent team-building events
• Home office support: we provide IT workstation equipment and a personal budget of up to €540 for home workplace furniture
• A daily lunch allowance
• Company bike leasing scheme
• Monthly budget for a flexible benefits platform
• Work from Home allowance
• Collective Defined Contribution Pension plan
• A personal monthly budget for shopping on Vinted
• An NS Business Card
• A dog-friendly office
• Up to 90 days per year in the EU, of these, 21 days can be spent globally. For non-EU citizens, it's 21 days worldwide.
• Each year, you’ll be given a learning budget (starting at €3,000), and a total of up to 10 working days over a 2-year period to support your personal and professional development.
• Our hybrid model, with 2 recommended office days a week, gives you and your team the flexibility to decide if and when you want to work from home, and when to catch up in person.
• The annual gross salary range for this position excluding 8% holiday pay is: €121.600—€205.200 EUR