Staff / Senior Staff Security Engineer, IT

Location: Amsterdam, Netherlands. Hybrid work with two recommended office days per week.

Annual gross salary: €121,600–€205,200 EUR, excluding 8% holiday pay.

Company

hirify.global operates a European marketplace for second-hand clothing and lifestyle items, alongside shipping and payment businesses.

What you will do

• Own the IT security roadmap, threat-model the workplace estate, prioritize attack paths, and drive risks to closure.
• Secure hirify.global’s Mac-first device fleet and Windows and Linux endpoints through hardened baselines, least privilege, EDR, and device trust.
• Engineer workforce identity controls, including phishing-resistant authentication, joiner-mover-leaver automation, privileged access, and time-bound contractor access.
• Secure SaaS and business applications, OAuth and API integrations, data flows, shadow IT, and shadow AI.
• Protect office networks, remote access, warehouses, and electronics verification centres, including the boundary with hirify.global Go’s security team.
• Build security automation, risk governance, and compliance-as-code while developing IT’s security engineering practice.

Requirements

• Deep hands-on experience securing corporate IT estates at scale across endpoints, device management, workforce identity, access, SaaS, and business applications.
• Engineering experience with automation, scripting in Python, Go, or similar, identity and infrastructure as code, and product-oriented security controls.
• Experience building a security practice from scratch inside an IT or infrastructure organization.
• Experience securing networks and devices in physical sites such as warehouses, labs, verification centres, or repair centres.
• Ability to influence without authority and translate technical risk into business consequences for senior audiences.
• Excellent written and spoken English required.

Nice to have

• Experience with Okta, Jamf, Google Workspace, Atlassian, Workato, or equivalent tools.
• Expertise in firmware, secure boot, device attestation, peripheral and USB threats, or EDR engineering.
• Offensive security experience, OSCP or similar certifications, detection engineering, or ISO 27001 and NIS2 implementation experience.

Culture & Benefits

• Hybrid work with flexibility to work from home and in the office.
• Up to 90 remote workdays per year in the EU, including up to 21 days globally; non-EU citizens can work 21 days worldwide.
• 25 days of paid annual leave, pension contributions, lunch allowance, mobility benefits, and a flexible benefits budget.
• Learning budget starting at €3,000 annually and up to 10 working days over two years for development.
• MacBook equipment, home-office support of up to €540, employee assistance for employees and families, and share options.