Security Engineer

Trade Republic
Berlin, Germany
27 days ago
Apply on startup.jobs
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Working hours
Regular working hours
Job source

Tech stack

Kubernetes Security Amazon Web Services Microsoft Azure Cloud Computing Cloud Computing Security Cyber Security Customer Data Management Python (Programming Language) Security Information and Event Management EndPointSecurity Scripting Multi-Cloud
+3 more
Marisk Purple Team (Cyber Security) SentinelOne Expertise

Job description

As a Senior Security Engineer in Purple Teaming, you’ll plan and execute purple team exercises aligned to real-world threat actors to protect Trade Republic’s critical systems and customer data. Your responsibilities include:

  • Design attack scenarios covering initial access, persistence, lateral movement, privilege escalation, command-and-control, and exfiltration.
  • Coordinate with business and engineering teams to gather requirements, understand operational constraints, and ensure testing activities align with business risk.
  • Assess existing security controls to ensure they aren’t just “active,” but actually effective.
  • Conduct deep-dive assessments of internal networks, applications, and cloud infrastructure.
  • Develop and tune SIEM detections, analytics rules, and alerts based on attack simulations and real incidents together with the Security Operations team.
  • Validate alert quality, reduce false positives, and improve signal-to-noise ratio.
  • Validate coverage of detections against known TTPs and identify detection gaps.
  • Support and enhance incident response playbooks, escalation paths, and response automation.
  • Conduct hypothesis-driven threat hunts based on attacker tradecraft and threat intelligence.

Requirements

Core Experience

  • 5+ years as a Security Engineer with 3+ years specializing in Purple/Red/Blue Teaming.
  • Experience running or leading purple team exercises in enterprise environments
  • Strong understanding of real-world attacker behavior, not just theoretical frameworks
  • Experience operating in regulated or compliance-driven environments (MaRisk, BAIT, GDPR)

Technical Experience

  • Strong understanding of cloud security (AWS) and Kubernetes security
  • Good understanding of macOS security
  • Experience with SIEM solutions, preferably Google SecOps
  • Experience with Endpoint Detection & Response (EDR) tools such as SentinelOne or CrowdStrike
  • Proficiency in Python, Go or other scripting language
  • Multi-cloud experience (GCP, Azure) is advantageous

About the company

Trade Republic is the largest savings platform in Europe - we operate in 18 countries, serving +10 million customers who trusted us with over 150B in assets. But we’re striving for more.

We have a bold mission to empower everyone to build wealth with easy, safe, and free access to financial systems. You will have the opportunity to grow your career by collaborating with a team of outstanding talents and state-of-the-art technology to build a lasting, positive future for millions., Our culture rewards ownership, excellence, and high energy. We care deeply about outcomes and hold each other accountable - we’re here to win and fix one of the largest challenges Europeans face - closing the pension gap and democratizing wealth. If this gets you fired up, reach out!

We believe it’s our team’s varied identities and backgrounds that make us sharper and stronger. We’re committed to creating an environment where everyone feels respected and has equal opportunity to thrive in their careers. For any questions on DEI during the interview process, reach out to your recruitment partner.

We believe it’s our team’s varied identities and backgrounds that make us sharper and stronger. We’re committed to creating an environment where everyone feels respected and has equal opportunity to thrive in their careers. For any questions on DEI during the interview process, reach out to your recruitment partner.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on startup.jobs
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:22 min

Overcoming developer challenges in multi-cloud environments

Sandeep Pal Sandeep Pal ¡ Coffee With Developers

1:04 min

Introduction to Bitcoin script parsing tools

Steve Shadders ¡ LIVE

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira ¡ Coffee With Developers

1:20 min

Introduction to multi-cloud development infrastructure

Sandeep Pal Sandeep Pal ¡ Coffee With Developers

1:53 min

Evaluating traditional scripting languages for modern development tasks

Jens Knipper Jens Knipper ¡ Europe 2026 Virtual

5:01 min

Bridging the gap between software development and security

Vandana Verma ¡ LIVE

Videos

See all

Related articles

See all