Senior Security Engineer - Application Security
Trade Republic6 months ago
Berlin, Germany or London, United KingdomSenior
Responsibilities
- Partner with engineering teams to integrate security into the software development lifecycle from design through deployment.
- Conduct security code reviews, threat modeling sessions, and architecture reviews for critical applications and services.
- Design and implement SAST, DAST, and SCA solutions and maintain application security testing automation in CI/CD pipelines.
- Develop secure coding standards, security libraries, and reusable security components.
- Perform penetration testing and vulnerability assessments for web applications, APIs, and mobile applications.
- Triage, prioritize, and remediate application vulnerabilities with development teams.
- Create a security champions program and provide security training to engineering teams.
- Research emerging application security threats and integrate defensive measures into security architecture.
- Contribute to bug bounty program management and coordinate with external security researchers.
Requirements
- 5+ years of experience as a Security Engineer, including 4+ years focused on application security.
- Deep understanding of web application security, OWASP Top 10, API security, and authentication and authorization.
- Hands-on experience with Burp Suite, OWASP ZAP, Semgrep, or similar security testing tools.
- Strong programming skills in Python, Java, Kotlin, Go, or JavaScript.
- Experience integrating security tooling into CI/CD pipelines using GitHub Actions, GitLab CI, or Jenkins.
- Expertise in secure architecture patterns for microservices, APIs, and distributed systems.
- Understanding of cryptography, secure session management, and identity and access management.
- Experience with mobile application security for iOS or Android.
- Excellent communication skills for explaining security concepts to engineering audiences.
- Experience with cryptocurrency or blockchain infrastructure and application security is a major bonus.
- Knowledge of PCI-DSS, GDPR, and MaRisk compliance frameworks is advantageous.
Benefits
- Position based in Berlin or London.
- Inclusive workplace committed to equal opportunity and respect for varied identities and backgrounds.
- Opportunity to collaborate with a high-performing team and work on financial systems serving millions of customers.
About Trade Republic
Trade Republic builds an app-based brokerage and savings platform for retail investors in Europe, offering low-cost trading in stocks, ETFs, derivatives, and cryptocurrencies, plus automated savings plans and interest on cash. It makes money from select fees, interest margin, and partnerships with market infrastructure providers. Founded in 2015 and headquartered in Berlin, it operates across much of the EU and is licensed in Germany as a securities trading bank (Trade Republic Bank GmbH).