Staff / Senior Staff Security Engineer, IT at Vinted
At a glance
- Company
- Vinted
- Location
- Amsterdam, NL, Netherlands
- Work arrangement
- On-site
- Employment type
- Full-time
- Experience
- 5–10 years
- Working hours
- 40 hours
- Visa sponsorship
- Offered, according to the listing
- Posted
- Added to The Stack
✨ The Stack take on this Vinted job
- 🏢 Vinted has 6 jobs here, 6 with visa sponsorship see all
- 📊 7 Security Engineer jobs in the Netherlands in the last 60 days see them
- 🛂 Visa: Highly Skilled Migrant permit. 30 or older: €5,942 a month guide
- 💡 No salary shown. Ask Vinted if it is above the minimum.
Updated 2026-11-01, from our data and official sources.
About the role
Responsibilities:
- Own IT security for the workplace estate end-to-end: threat model devices, networks, peripherals, warehouses and verification sites.
- Harden endpoints and device fleet, define and implement secure configurations and patching policies.
- Secure workforce identity, enforce phishing-resistant authentication, RBAC and privileged access controls across SaaS and business applications.
- Govern integrations, automations and AI tooling that connect IT services; assess and reduce the extended workforce attack surface.
- Build practical security capabilities inside IT (engineering-first approach), collaborate with central security and partner teams, and deliver engineering solutions rather than only policy.
- Act as the embedded senior security engineer for IT: lead implementation, incident response for complex events, and continuous improvement across tooling and processes.
Requirements:
- Proven senior/staff-level security engineering experience with responsibility for enterprise IT security.
- Strong skills in threat modeling, endpoint security, identity & access management, and privileged access management.
- Experience securing SaaS portfolios, APIs and integrations, and managing vulnerability programs.
- Familiarity with cloud services, device management, network security and automation/Orchestration of security controls.
- Excellent communication, stakeholder collaboration and risk-based decision-making skills.
- Ability to work as an individual contributor while shaping roadmap and delivering engineering solutions across distributed teams.
Responsibilities
Own the IT security roadmap end-to-end: threat-model the workplace estate, harden endpoints, secure the workforce identity, and govern the SaaS and business-application security. Build security capabilities within IT and partner with engineering teams across units to make risk-based security the standard, not a gate.
Requirements
Proven experience in security engineering at a senior/staff level; strong knowledge of threat modeling, endpoint security, identity management, and secure software supply chains. Experience enabling security across IT infrastructure, cloud services, and cross-functional teams; excellent communication and risk-based decision-making.
Key skills
- security engineering — in 11 other listings on The Stack
- threat modeling — in 31 other listings on The Stack
- endpoint security — in 5 other listings on The Stack
- identity and access management — in 11 other listings on The Stack
- phishing-resistant authentication — not in any other listing on The Stack
- role-based access control — in 1 other listing on The Stack
- privileged access management — in 3 other listings on The Stack
- OAuth — in 4 other listings on The Stack
- API integrations
- SaaS security
- network security
- vulnerability management
On The Stack (as of 2026-11-01)
Frequently asked questions about Vinted
Is this Staff / Senior Staff Security Engineer, IT role still open?
It was posted on 2026-10-31 and is listed as active on The Stack. Confirm on Vinted's application page before applying.
Does Vinted offer visa sponsorship?
This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Vinted's site.
Where is this role located?
The listing gives the location as Amsterdam, NL, Netherlands. It is marked on-site.
What skills does this role ask for?
The listing names: security engineering, threat modeling, endpoint security, identity and access management, phishing-resistant authentication, role-based access control, privileged access management, OAuth, API integrations, SaaS security, network security, vulnerability management.