# Lead Security Engineer at Catawiki

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Shape and lead the security engineering

- **Company:** Catawiki (https://jobs.trythestack.co/companies/catawiki)
- **Location:** The Randstad, NL, Netherlands
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 5–10 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** Google Cloud, Kubernetes, Terraform, Infrastructure as Code, CI/CD, Threat Modelling, Secure Code Reviews, Incident Response, Vulnerability Management, Ruby, Python, Go
- **Posted by employer:** 2026-11-03
- **Added to The Stack:** 2026-11-04
- **Listed until:** 2027-01-02
- **Status:** Active
- **Apply:** https://job-boards.greenhouse.io/catawiki/jobs/8245606?gh_src=0e8e94821 (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/lead-security-engineer-catawiki

## About the role

Responsibilities:
- Shape and lead the security engineering roadmap; drive complex initiatives from assessment through production and operation.
- Design and implement security controls and automation across applications, cloud (GCP), IAM, CI/CD and IaC.
- Conduct threat modelling, secure design and code reviews early in the development lifecycle.
- Investigate vulnerabilities, prioritise remediation based on risk, and build reusable controls to prevent recurrence.
- Improve detection and response tooling; contribute to incident investigations and post-incident learning.
- Mentor security engineers and coach product teams to adopt practical security practices.

Requirements:
- Strong hands-on security engineering experience in cloud-native and application environments (GCP/Kubernetes preferred).
- Experience with CI/CD and infrastructure-as-code security, IAM and secrets management.
- Proven track record of threat modelling, secure code reviews and integrating security into developer workflows.
- Practical scripting or coding ability (Ruby, Python or Go) to build automation and tooling.
- Experience in vulnerability management and incident response.
- Excellent communication and ability to influence across product and platform teams.

## Responsibilities

Lead the security engineering roadmap and deliver complex security initiatives across applications and cloud infrastructure, including IAM, CI/CD, and infrastructure as code. Design and implement security controls and automation, conduct threat modelling and secure code reviews, investigate vulnerabilities, and mentor engineers while collaborating with product and platform teams.

## Requirements

Extensive hands-on security engineering experience in software or cloud environments; strong knowledge of application and cloud security, including IAM and secrets management; experience with threat modelling, secure code reviews, and secure tooling; proficient in Ruby, Python or Go; experience integrating security into CI/CD and IaC; prior incident response experience.

## FAQ

- **Is this Lead Security Engineer role still open?** It was posted on 2026-11-03 and is listed as active on The Stack. Confirm on Catawiki's application page before applying.
- **Does Catawiki offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Catawiki's site.
- **Where is this role located?** The listing gives the location as The Randstad, NL, Netherlands. It is marked on-site.
- **What skills does this role ask for?** The listing names: Google Cloud, Kubernetes, Terraform, Infrastructure as Code, CI/CD, Threat Modelling, Secure Code Reviews, Incident Response, Vulnerability Management, Ruby, Python, Go.

## More like this

- [All jobs at Catawiki](https://jobs.trythestack.co/companies/catawiki.md)
- [Security Engineer Jobs in the Netherlands with Visa Sponsorship](https://jobs.trythestack.co/visa-sponsorship-jobs/netherlands/security-engineer)
- [All visa sponsorship jobs in the Netherlands](https://jobs.trythestack.co/visa-sponsorship-jobs/netherlands)
- [Security Engineer at OLIX](https://jobs.trythestack.co/jobs/security-engineer-olix.md)
- [Staff / Senior Staff Security Engineer, Vinted Pay at Vinted](https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-vinted-pay-vinted.md)
- [Security Engineer at Quanza](https://jobs.trythestack.co/jobs/security-engineer-quanza.md)
- [Senior Security Engineer, Threat Response at Asana](https://jobs.trythestack.co/jobs/senior-security-engineer-threat-response-asana.md)
- [Staff / Senior Staff Security Engineer, IT at Vinted](https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-it-vinted.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://job-boards.greenhouse.io/catawiki/jobs/8245606?gh_src=0e8e94821). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "lead-security-engineer-catawiki": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Lead Security Engineer at Catawiki, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/lead-security-engineer-catawiki)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md