Security Tech Lead Manager, Catawiki

• You have substantial hands-on security engineering experience in a software or cloud environment and have implemented and operated security capabilities in production
• You have previously managed engineers as direct reports, including performance reviews, career development and difficult feedback. You can balance people management with technical contribution
• You have owned a security roadmap or programme, translated priorities into deliverable work and coordinated implementation across engineering teams
• You have strong knowledge of application and cloud security, including identity and access management, secrets management and secure software development
• You are experienced in threat modelling, secure code and design reviews, vulnerability prioritisation and practical incident response
• You can develop or automate in Ruby, Python, Go or a similar language, are comfortable reviewing backend code and have integrated security controls into engineering workflows
• You communicate clearly with engineers and non-technical partners, explain risk in business terms and gain support for decisions when priorities compete
• If you’re excited about this role but don’t meet every requirement, we still encourage you to apply anyway. You may be just the right candidate for this or other roles

Desirable

• As our Security Tech Lead Manager, you’ll manage a team of 2–3 security engineers within Platform Engineering and remain hands-on
• You’ll own the security engineering roadmap and take responsibility for the team’s delivery, performance and development
• Working with Product and Platform Engineering, you’ll help protect our marketplace, our customers and their data
• Our platform runs on Google Cloud and Kubernetes
• You’ll focus on application and cloud security, secure software delivery and risks in internal and AI-enabled systems
• You’ll turn security priorities into engineering work, make clear trade-offs and help teams adopt controls that fit their everyday workflows
• Manage and develop the security team through regular one-to-ones, timely feedback, performance reviews and career development. Address underperformance and support hiring and onboarding
• Own the security engineering roadmap. Prioritise work based on risk, business needs and team capacity, delegate effectively and remove blockers to delivery
• Stay hands-on by building security controls and automation, reviewing code and guiding technical decisions across applications, cloud infrastructure and software delivery
• Partner with Product and Platform Engineering early in design. Lead threat modelling and security reviews, and help teams choose secure approaches that are practical to implement
• Improve vulnerability management. Assess findings in the context of exposure and business impact, agree remediation priorities with system owners and track issues through resolution
• Improve security checks in CI/CD and infrastructure as code, including dependency and secret scanning. Reduce false positives and help engineers act on findings
• Coordinate the security team’s technical contribution to incident response and investigations. Turn lessons from incidents into improvements to detection, response and preventive controls
• Work with Legal, IT and Trust & Safety on security controls, policies and audit evidence where responsibilities overlap
• Measure and communicate progress through remediation times, control coverage and adoption. Explain remaining risks, delivery progress and trade-offs to technical and business stakeholders

• Apply with an English CV and Cover Letter