Senior Security Engineer - Application Security
Trade Republic5 months ago
Berlin, Germany or London, United KingdomSenior
Responsibilities
- Partner with engineering teams to integrate security into the software development lifecycle from design through deployment.
- Conduct security code reviews, threat modeling sessions, and architecture reviews for critical applications and services.
- Design and implement SAST, DAST, and SCA solutions and maintain application security testing automation in CI/CD pipelines.
- Develop secure coding standards, security libraries, and reusable security components.
- Perform penetration testing and vulnerability assessments for web applications, APIs, and mobile applications.
- Triage, prioritize, and remediate application vulnerabilities with development teams.
- Create a security champions program and provide security training to engineering teams.
- Research emerging application security threats and integrate defensive measures into security architecture.
- Contribute to bug bounty program management and coordinate with external security researchers.
Requirements
- 5+ years of experience as a Security Engineer, including 4+ years focused on application security.
- Deep understanding of web application security, OWASP Top 10, API security, and authentication and authorization.
- Hands-on experience with Burp Suite, OWASP ZAP, Semgrep, or similar security testing tools.
- Strong programming skills in Python, Java, Kotlin, Go, or JavaScript.
- Experience integrating security tooling into CI/CD pipelines using GitHub Actions, GitLab CI, or Jenkins.
- Expertise in secure architecture patterns for microservices, APIs, and distributed systems.
- Understanding of cryptography, secure session management, and identity and access management.
- Experience with mobile application security for iOS or Android.
- Excellent communication skills for explaining security concepts to engineering audiences.
- Experience with cryptocurrency or blockchain infrastructure and application security is a major bonus.
- Knowledge of PCI-DSS, GDPR, and MaRisk compliance frameworks is advantageous.
Benefits
- Position based in Berlin or London.
- Inclusive workplace committed to equal opportunity and respect for varied identities and backgrounds.
- Opportunity to collaborate with a high-performing team and work on financial systems serving millions of customers.
About Trade Republic
What does your Bank offer?