Staff / Senior Staff Security Engineer, Vinted Pay at Vinted
At a glance
- Company
- Vinted
- Location
- London, GB, United Kingdom
- Work arrangement
- On-site
- Employment type
- Full-time
- Experience
- 5–10 years
- Working hours
- 40 hours
- Visa sponsorship
- Offered, according to the listing
- Posted
- Added to The Stack
✨ The Stack take on this Vinted job
- 🏢 Vinted has 7 jobs here, 7 with visa sponsorship see all
- 📊 9 Security Engineer jobs in the United Kingdom in the last 60 days see them
- 🛂 Skilled Worker visa. Standard minimum salary: £41,700 a year guide
- 💡 No salary shown. Ask Vinted if it is above the minimum.
Updated 2026-11-05, from our data and official sources.
Apply with your AI assistant
With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.
Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-vinted-pay-vinted
Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "staff-senior-staff-security-engineer-vinted-pay-vinted": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
About the role
Responsibilities:
- Own Vinted Pay security roadmap end-to-end: assess estate, prioritise risks and track remediation.
- Translate regulatory requirements (PCI DSS, DORA, FCA, Bank of Lithuania) into technical guardrails and automated controls.
- Design and deliver engineering-grade security controls across multi-region AWS, payment pipelines, wallet services and payment pages.
- Lead cross-functional initiatives with Payments platform, software engineers, and central security to embed secure SDLC practices.
- Implement vulnerability management, SIEM use-cases, detection rules, and incident-driven improvements.
- Drive least-privilege access, data protection/encryption, and secrets/identity controls.
Requirements:
- Extensive hands-on security engineering experience in fintech/payments at scale.
- Proven work with multi-region AWS environments and cloud-native security patterns.
- Deep knowledge of PCI DSS and other applicable financial regulations (DORA, FCA, Bank of Lithuania) and translating them to technical controls.
- Practical experience with vulnerability management, SIEM, threat modelling and secure SDLC tooling.
- Strong automation and scripting skills to implement guardrails and compliance automation.
- Excellent collaboration and stakeholder leadership; experience supporting audits and regulatory evidence.
Responsibilities
Own the Vinted Pay security roadmap end to end, assess the estate, prioritise risks, and drive mitigations. Translate regulatory requirements into automated security controls and engineering guardrails. Lead cross-functional security initiatives and embed secure development into Payments engineering.
Requirements
Extensive security engineering experience in fintech/payments, with hands-on work across multi-region AWS environments, PCI DSS, DORA, and regulatory audits. Strong knowledge of vulnerability management, SIEM, data protection, and secure development practices; ability to translate complex regulations into practical guardrails. Excellent collaboration and leadership in cross-functional teams.
Key skills
- AWS — in 802 other listings on The Stack
- PCI DSS — in 3 other listings on The Stack
- DORA — not in any other listing on The Stack
- FCA compliance — in 1 other listing on The Stack
- Bank of Lithuania compliance — not in any other listing on The Stack
- security engineering — in 12 other listings on The Stack
- threat modelling — in 5 other listings on The Stack
- secure SDLC — not in any other listing on The Stack
- SIEM
- vulnerability management
- data encryption
- least-privilege access
On The Stack (as of 2026-11-05)
Frequently asked questions about Vinted
Is this Staff / Senior Staff Security Engineer, Vinted Pay role still open?
It was posted on 2026-11-03 and is listed as active on The Stack. Confirm on Vinted's application page before applying.
Does Vinted offer visa sponsorship?
This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Vinted's site.
Where is this role located?
The listing gives the location as London, GB, United Kingdom. It is marked on-site.
What skills does this role ask for?
The listing names: AWS, PCI DSS, DORA, FCA compliance, Bank of Lithuania compliance, security engineering, threat modelling, secure SDLC, SIEM, vulnerability management, data encryption, least-privilege access.