# Staff / Senior Staff Security Engineer, IT at Vinted

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Own IT security for the workplace estate

- **Company:** Vinted (https://jobs.trythestack.co/companies/vinted)
- **Location:** Amsterdam, NL, Netherlands
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 5–10 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** security engineering, threat modeling, endpoint security, identity and access management, phishing-resistant authentication, role-based access control, privileged access management, OAuth, API integrations, SaaS security, network security, vulnerability management
- **Posted by employer:** 2026-10-31
- **Added to The Stack:** 2026-11-01
- **Listed until:** 2026-12-30
- **Status:** Active
- **Apply:** https://careers.vinted.com/jobs/4975609101?gh_jid=4975609101&gh_src=2aee7c72teu (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-it-vinted

## About the role

Responsibilities:
- Own IT security for the workplace estate end-to-end: threat model devices, networks, peripherals, warehouses and verification sites.
- Harden endpoints and device fleet, define and implement secure configurations and patching policies.
- Secure workforce identity, enforce phishing-resistant authentication, RBAC and privileged access controls across SaaS and business applications.
- Govern integrations, automations and AI tooling that connect IT services; assess and reduce the extended workforce attack surface.
- Build practical security capabilities inside IT (engineering-first approach), collaborate with central security and partner teams, and deliver engineering solutions rather than only policy.
- Act as the embedded senior security engineer for IT: lead implementation, incident response for complex events, and continuous improvement across tooling and processes.

Requirements:
- Proven senior/staff-level security engineering experience with responsibility for enterprise IT security.
- Strong skills in threat modeling, endpoint security, identity & access management, and privileged access management.
- Experience securing SaaS portfolios, APIs and integrations, and managing vulnerability programs.
- Familiarity with cloud services, device management, network security and automation/Orchestration of security controls.
- Excellent communication, stakeholder collaboration and risk-based decision-making skills.
- Ability to work as an individual contributor while shaping roadmap and delivering engineering solutions across distributed teams.

## Responsibilities

Own the IT security roadmap end-to-end: threat-model the workplace estate, harden endpoints, secure the workforce identity, and govern the SaaS and business-application security. Build security capabilities within IT and partner with engineering teams across units to make risk-based security the standard, not a gate.

## Requirements

Proven experience in security engineering at a senior/staff level; strong knowledge of threat modeling, endpoint security, identity management, and secure software supply chains. Experience enabling security across IT infrastructure, cloud services, and cross-functional teams; excellent communication and risk-based decision-making.

## FAQ

- **Is this Staff / Senior Staff Security Engineer, IT role still open?** It was posted on 2026-10-31 and is listed as active on The Stack. Confirm on Vinted's application page before applying.
- **Does Vinted offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Vinted's site.
- **Where is this role located?** The listing gives the location as Amsterdam, NL, Netherlands. It is marked on-site.
- **What skills does this role ask for?** The listing names: security engineering, threat modeling, endpoint security, identity and access management, phishing-resistant authentication, role-based access control, privileged access management, OAuth, API integrations, SaaS security, network security, vulnerability management.

## More like this

- [All jobs at Vinted](https://jobs.trythestack.co/companies/vinted.md)
- [Security Engineer Jobs in the Netherlands with Visa Sponsorship](https://jobs.trythestack.co/visa-sponsorship-jobs/netherlands/security-engineer)
- [All visa sponsorship jobs in the Netherlands](https://jobs.trythestack.co/visa-sponsorship-jobs/netherlands)
- [Security Engineer at Superhuman](https://jobs.trythestack.co/jobs/security-engineer-superhuman-396a9df8.md)
- [Senior Security Engineer, Corporate Security at Flexport](https://jobs.trythestack.co/jobs/senior-security-engineer-corporate-security-flexport.md)
- [Senior Security Engineer, Detection & Response at Flexport](https://jobs.trythestack.co/jobs/senior-security-engineer-detection-response-flexport.md)
- [Senior/Staff Security Engineer, Detection & Response at Anthropic](https://jobs.trythestack.co/jobs/seniorstaff-security-engineer-detection-response-anthropic.md)
- [Security Engineer (AI Red Team) at Refractal](https://jobs.trythestack.co/jobs/security-engineer-ai-red-team-refractal.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://careers.vinted.com/jobs/4975609101?gh_jid=4975609101&gh_src=2aee7c72teu). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "staff-senior-staff-security-engineer-it-vinted": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Staff / Senior Staff Security Engineer, IT at Vinted, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-it-vinted)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md