Senior Security Engineer - Purple Teaming
Senior Security Engineer on the Purple Teaming side at Trade Republic, designing and running purple team exercises modeled on real attacker TTPs, assessing and tuning SIEM/EDR detections, and conducting threat hunts across internal networks, applications, and cloud (AWS/Kubernetes) infrastructure to protect a European savings platform serving 10M+ customers.
- Compensation
- Not disclosed
- Location
- Berlin
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years as a Security Engineer
- 3+ years specializing in Purple/Red/Blue Teaming
- Experience running or leading purple team exercises in enterprise environments
- Strong understanding of real-world attacker behavior, not just theoretical frameworks
- Experience operating in regulated or compliance-driven environments (MaRisk, BAIT, GDPR)
- Strong understanding of cloud security (AWS) and Kubernetes security
- Good understanding of macOS security
- Experience with SIEM solutions, preferably Google SecOps
- Experience with EDR tools such as SentinelOne or CrowdStrike
- Proficiency in Python, Go or other scripting language
Nice to have
- Multi-cloud experience (GCP, Azure)
Full description
THE BEST WORK OF YOUR CAREER
Trade Republic is the largest savings platform in Europe - we operate in 18 countries, serving +10 million customers who trusted us with over 150B in assets. But we’re striving for more.
We have a bold mission to empower everyone to build wealth with easy, safe, and free access to financial systems. You will have the opportunity to grow your career by collaborating with a team of outstanding talents and state-of-the-art technology to build a lasting, positive future for millions.
WHAT YOU'LL BE DOING
As a Senior Security Engineer in Purple Teaming, you'll plan and execute purple team exercises aligned to real‑world threat actors to protect Trade Republic's critical systems and customer data. Your responsibilities include:
- Design attack scenarios covering initial access, persistence, lateral movement, privilege escalation, command‑and‑control, and exfiltration.
- Coordinate with business and engineering teams to gather requirements, understand operational constraints, and ensure testing activities align with business risk.
- Assess existing security controls to ensure they aren't just "active," but actually effective.
- Conduct deep-dive assessments of internal networks, applications, and cloud infrastructure.
- Develop and tune SIEM detections, analytics rules, and alerts based on attack simulations and real incidents together with the Security Operations team.
- Validate alert quality, reduce false positives, and improve signal‑to‑noise ratio.
- Validate coverage of detections against known TTPs and identify detection gaps.
- Support and enhance incident response playbooks, escalation paths, and response automation.
- Conduct hypothesis‑driven threat hunts based on attacker tradecraft and threat intelligence.
WHAT WE'RE LOOKING FOR Core Experience
- 5+ years as a Security Engineer with 3+ years specializing in Purple/Red/Blue Teaming.
- Experience running or leading purple team exercises in enterprise environments
- Strong understanding of real‑world attacker behavior, not just theoretical frameworks
- Experience operating in regulated or compliance‑driven environments (MaRisk, BAIT, GDPR)
Technical Experience
- Strong understanding of cloud security (AWS) and Kubernetes security
- Good understanding of macOS security
- Experience with SIEM solutions, preferably Google SecOps
- Experience with Endpoint Detection & Response (EDR) tools such as SentinelOne or CrowdStrike