Vinted
Our mission is to make second-hand the first choice, and we're looking for people who want to help us get there. Every day, we work together to help our members buy and sell pre-loved clothing and lifestyle items, giving each piece a second life – or even a third. The Vinted Group is made up of three business units that support this mission:
- Vinted Marketplace is Europe’s leading platform for second-hand fashion and a go-to destination for all kinds of pre-loved items, with a growing range of categories. Our platform connects millions of members across 20+ markets, helping great items find a new life.
- Vinted Go enhances the shipping experience with a vast network of over 500,000 pick-up and drop-off points, partnering with more than 60 carriers across Europe, with added services like item verification for peace of mind on high-value pieces.
- Vinted Pay is the newest part of the Vinted Group, dedicated to bringing secure, reliable payments to buyers and sellers across Europe. Seamlessly integrated into the Vinted app, it helps keep every transaction safe, efficient, and easy for our members.
Founded in 2008 in Lithuania, Vinted began as a way for friends to find new homes for clothes they no longer needed. In 2019, we became Lithuania's first unicorn! Today, our headquarters remain in Vilnius, and we've grown with offices across Europe, supported by a team of over 2,000 people. Our backers include Accel, EQT Growth, Insight Partners, Lightspeed Venture Partners, Sprints, and TPG.
Information about the position
As a Security Engineer focusing on web application security, you will be part of the Group Security domain, which supports the whole organisation. As an Information Security Engineering team, we adopt or develop technological solutions to strengthen resilience against exploitation by adversaries, and to secure the organisation against external and internal threats. To achieve this, we provide consultations, incident response, pentesting and Application Security enhancing technologies to the whole organisation.
In this position, you’ll
- Conduct white-box penetration testing on internal web applications and APIs
- Provide application security guidance and support to product and development teams, including threat modeling and security reviews
- Contribute to the development of automated security testing to scale vulnerability detection and foster secure coding practices
- Manage and coordinate penetration tests performed by external partners
- Maintain and enhance the vulnerability management process
Work perks
- The opportunity to benefit from our share options programme
- 25 working days of holiday
- Newest MacBook models
- Free access to an office gym
- Mental and emotional health support through the Mindletic app
- Home office support: we provide IT workstation equipment and a personal budget of up to €540 for home workplace furniture
- Private health insurance
- On-site canteen serving delicious homemade food at friendly prices
- Frequent team-building events
- A personal monthly budget for shopping on Vinted
- The opportunity to spend up to 90 days per year - 21 of which can be spent working outside of the EU - on workation
- A dog-friendly office
Working at Vinted
Individual Learning Budget
We invest in your professional growth! As part of our commitment to continuous learning, we offer an annual learning budget to support your personal and career development through courses, certifications, workshops and more.
Hybrid Work
We’ve adopted a hybrid workplace model where 2 days in the office are recommended but not enforced. It’s up to you and your team to decide on the exact days you’ll spend working together in person.
The salary range for this position is €4,975 to €6,725 gross per month.
About you
- Passion for cyber security and dedication to continuous learning and development, both personally and professionally
- Thorough understanding of common web security vulnerabilities (e.g., OWASP Top 10) and their remediation strategies
- Experience identifying security issues through code review
- Familiarity with penetration testing tools and libraries, including static and dynamic code analysis
- Proficiency in at least one scripting or development language (preferably Go, Ruby on Rails, Python, JavaScript)
- Skilled at explaining technical concepts to a non-technical stakeholders
- Proactive in taking ownership and dedicated to achieving excellence
- Excellent written and verbal communication skills in English
