# Staff / Senior Staff Security Engineer, Vinted Pay at Vinted

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Own Vinted Pay security roadmap end-to-e

- **Company:** Vinted (https://jobs.trythestack.co/companies/vinted)
- **Location:** London, GB, United Kingdom
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 5–10 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** AWS, PCI DSS, DORA, FCA compliance, Bank of Lithuania compliance, security engineering, threat modelling, secure SDLC, SIEM, vulnerability management, data encryption, least-privilege access
- **Posted by employer:** 2026-11-03
- **Added to The Stack:** 2026-11-04
- **Listed until:** 2027-01-02
- **Status:** Active
- **Apply:** https://careers.vinted.com/jobs/4980907101?gh_jid=4980907101&gh_src=2aee7c72teu (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-vinted-pay-vinted

## About the role

Responsibilities:
- Own Vinted Pay security roadmap end-to-end: assess estate, prioritise risks and track remediation.
- Translate regulatory requirements (PCI DSS, DORA, FCA, Bank of Lithuania) into technical guardrails and automated controls.
- Design and deliver engineering-grade security controls across multi-region AWS, payment pipelines, wallet services and payment pages.
- Lead cross-functional initiatives with Payments platform, software engineers, and central security to embed secure SDLC practices.
- Implement vulnerability management, SIEM use-cases, detection rules, and incident-driven improvements.
- Drive least-privilege access, data protection/encryption, and secrets/identity controls.

Requirements:
- Extensive hands-on security engineering experience in fintech/payments at scale.
- Proven work with multi-region AWS environments and cloud-native security patterns.
- Deep knowledge of PCI DSS and other applicable financial regulations (DORA, FCA, Bank of Lithuania) and translating them to technical controls.
- Practical experience with vulnerability management, SIEM, threat modelling and secure SDLC tooling.
- Strong automation and scripting skills to implement guardrails and compliance automation.
- Excellent collaboration and stakeholder leadership; experience supporting audits and regulatory evidence.

## Responsibilities

Own the Vinted Pay security roadmap end to end, assess the estate, prioritise risks, and drive mitigations. Translate regulatory requirements into automated security controls and engineering guardrails. Lead cross-functional security initiatives and embed secure development into Payments engineering.

## Requirements

Extensive security engineering experience in fintech/payments, with hands-on work across multi-region AWS environments, PCI DSS, DORA, and regulatory audits. Strong knowledge of vulnerability management, SIEM, data protection, and secure development practices; ability to translate complex regulations into practical guardrails. Excellent collaboration and leadership in cross-functional teams.

## FAQ

- **Is this Staff / Senior Staff Security Engineer, Vinted Pay role still open?** It was posted on 2026-11-03 and is listed as active on The Stack. Confirm on Vinted's application page before applying.
- **Does Vinted offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Vinted's site.
- **Where is this role located?** The listing gives the location as London, GB, United Kingdom. It is marked on-site.
- **What skills does this role ask for?** The listing names: AWS, PCI DSS, DORA, FCA compliance, Bank of Lithuania compliance, security engineering, threat modelling, secure SDLC, SIEM, vulnerability management, data encryption, least-privilege access.

## More like this

- [All jobs at Vinted](https://jobs.trythestack.co/companies/vinted.md)
- [Security Engineer Jobs in the United Kingdom with Visa Sponsorship](https://jobs.trythestack.co/visa-sponsorship-jobs/united-kingdom/security-engineer)
- [All visa sponsorship jobs in the United Kingdom](https://jobs.trythestack.co/visa-sponsorship-jobs/united-kingdom)
- [Security Engineer at OLIX](https://jobs.trythestack.co/jobs/security-engineer-olix.md)
- [Lead Security Engineer at Catawiki](https://jobs.trythestack.co/jobs/lead-security-engineer-catawiki.md)
- [Senior Security Engineer, Threat Response at Asana](https://jobs.trythestack.co/jobs/senior-security-engineer-threat-response-asana.md)
- [Security Engineer at Quanza](https://jobs.trythestack.co/jobs/security-engineer-quanza.md)
- [Security Engineer at Superhuman](https://jobs.trythestack.co/jobs/security-engineer-superhuman-396a9df8.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://careers.vinted.com/jobs/4980907101?gh_jid=4980907101&gh_src=2aee7c72teu). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "staff-senior-staff-security-engineer-vinted-pay-vinted": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Staff / Senior Staff Security Engineer, Vinted Pay at Vinted, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-vinted-pay-vinted)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md