Security Engineer

About Catawiki

Catawiki was founded in 2008. It was originally designed as a website where collectors could manage and keep track of their collections online. Visitors can still add new items to the existing catalogue of collectibles. Unsurprisingly, the name Catawiki is a combination of the words ‘catalogue’ and ‘wiki’. In 2011, Catawiki began hosting weekly auctions in various categories, including art, antiques, classic cars, watches, jewellery, fashion, books, and stamps.

Position

As a Security Engineer, you’ll join our Security function and work closely with Platform Engineers, development teams, Legal, IT, Trust & Safety teams to ensure the protection of our platform, our users, and their data. You’ll help build and maintain a strong security foundation across our systems — including our emerging use of AI — making security a natural part of how we design, build, and operate at scale.

In this role, you’ll operate in a highly collaborative, engineering-driven environment where security is a shared responsibility. You’ll combine hands-on technical work with cross-functional partnership, enabling secure product development, guiding teams through best practices, and helping Catawiki maintain user trust while continuing to grow securely and responsibly in an AI-enhanced environment.

What You’ll Do

• Identify, assess, and remediate security vulnerabilities across applications, infrastructure, internal services, and AI/ML pipelines.
• Conduct secure code reviews, threat modeling, and security assessments for new features, architectural changes and legacy components.
• Implement and maintain secure storage mechanisms, encryption practices, secrets management, and key management solutions.
• Define, document, and enforce security policies, standards, and best practices throughout the software development lifecycle (SDLC), including AI-related data handling and model governance.
• Collaborate closely with Platform Engineers to integrate security into CI/CD pipelines, infrastructure-as-code, runtime environments.
• Work with Legal, IT, Trust & Safety teams to ensure compliance, support investigations, manage security requirements.
• Participate in incident response — investigate security events, triage issues, support remediation, and strengthen preventive controls.
• Raise security awareness across the company by providing guidance, training, and proactive support for secure development, AI safety, and system design.
• Contribute to long-term security strategy by evaluating emerging threats — including those involving AI — identifying opportunities for automation, and recommending new tools or processes.

Your qualification

• You have development experience in Ruby, Python, or a similar language, and you’re comfortable reviewing and contributing to backend codebases.
• You bring 3+ years of hands-on security engineering experience, ideally in a cloud-based or high-traffic environment.
• You understand application, infrastructure, and AI/ML security principles, and you can navigate risk within data pipelines and model-driven systems.
• You have strong knowledge of secure coding practices and common vulnerabilities (OWASP, SANS) across both traditional and AI-enabled services.
• You’re experienced with secure code reviews, threat modeling, and designing practical and scalable mitigations.
• You have a solid understanding of cryptography, encryption, key management, secrets handling, and secure data storage.
• You’re familiar with integrating security into modern SDLC practices — including pipelines, IaC, cloud-native environments, and emerging AI workflows.
• You communicate clearly and collaborate effectively with engineering and non-engineering teams..
• You’re proactive, curious, and comfortable driving initiatives that strengthen our long-term security posture.

What we offer

• Create a visible impact by working at scale in a global organisation serving millions of customers across 80+ categories. In our flat structure, every role has a broad scope and directly impacts both our customers and the business.
• Learn and grow through our Learning & Development initiatives, including clear development plans and mentorship programmes to support your career progression.
• A culture of connection defines us. We’re a passionate, diverse team of 800+ Catawikians representing 60+ nationalities. We foster an inclusive and queer-friendly environment where everyone is encouraged to bring their full self to work.
• Celebrate life’s moments with us. You’ll receive a €100 Catavoucher when you join, a €50 Catavoucher on your birthday, and an extra day off each year to “Pursue Your Passion”. We also offer additional leave for key work anniversaries and important life events. Benefits may vary by location.

Additional details

Our Offices and Way of Working

Our vibrant offices in Amsterdam, Paris and Lisbon are designed to inspire collaboration. Most Catawikians operate in a hybrid setup, combining office-based and remote work, with a minimum of two days per week in the office, unless a role is explicitly stated as fully remote or fully office-based.