Senior Security Engineer, Trade Republic
Application Security
1-5 days a week in office
Investment platform
Open for applications
Investment platform
1001+ employees
Open for applications
1-5 days a week in office
1001+ employees
Company mission
To make private wealth accumulation and retirement planning easier for millions of Europeans with easy and secure access to the capital markets.
Role
Who you are
- 5+ years as a Security Engineer with 4+ years focused on application security
- Deep understanding of web application security (OWASP Top 10, API security, authentication/authorization)
- Hands-on experience with security testing tools (Burp Suite, OWASP ZAP, Semgrep, etc.)
- Strong programming skills in modern languages (Python, Java, Kotlin, Go, or JavaScript)
- Experience integrating security tooling into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins)
- Expertise in secure architecture patterns for microservices, APIs, and distributed systems
- Solid understanding of cryptography, secure session management, and identity/access management
- Hands-on experience with security testing of cryptocurrency/blockchain infrastructure and applications is a major bonus
- Experience with mobile application security (iOS/Android)
- Knowledge of compliance frameworks (PCI-DSS, GDPR, MaRisk) is advantageous
- Excellent communication skills to translate security concepts for engineering audience
What the job involves
- As a Senior Security Engineer in our Application Security team, you'll safeguard Trade Republic's applications and development lifecycle through proactive security integration and engineering excellence
- Partner with engineering teams to embed security into the software development lifecycle from design to deployment
- Conduct security code reviews, threat modeling sessions, and architecture reviews for critical applications and services
- Design and implement SAST, DAST, and SCA solutions to identify vulnerabilities early in the development process
- Build and maintain application security testing automation within CI/CD pipelines
- Develop secure coding standards, security libraries, and reusable security components for engineering teams
- Perform penetration testing and vulnerability assessments of web applications, APIs, and mobile applications
- Triage, prioritise, and remediate application vulnerabilities working closely with development teams
- Create security champions program and provide security training to engineering teams
- Research emerging application security threats and integrate defensive measures into the security architecture
- Contribute to bug bounty program management and coordinate with external security researchers
Our take
Trading has quickly become one of the biggest activities powering the global economy, with global equity trading amounting to over $100 trillion each year and growing, so it's a lucrative market that many want in on. Behind the rapid rise of its global growth are mobile brokerages, equally on the rise for their ease of use and increased access to information, they are powering the way for the future of the trading industry.
Trade Republic is a German-based mobile brokerage platform allowing users to buy and sell stocks, exchange-traded funds (ETFs), as well as other financial instruments all from their smartphones. As the platform operates exclusively through a mobile app, Trade Republic is making it easier than ever for a wider audience to get into trading and because of this, along with its low fees, the app has quickly become a popular choice for those looking to invest.
Since the company launched to the market in 2019, it has raised a significant amount of funding, amounting to over $1bn, and welcomes over one million users to its app, indicating the company's growth and reputation. Going forward, the company is focused on further expanding its offerings to more European countries and recently announced a step in this direction, having launched in Ireland.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-2% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Jun 2022
$292.3m
SERIES C
May 2021
$750m
SERIES C
Total funding: $1.1bn
Company HQ
Mitte, Berlin, Germany
Leadership
Christian Hecker
(Co-Founder)Experienced in Investment Banking having previously worked for Deutsche Bank and Merrill Lynch.
Marco Cancellieri
(Co-Founder)Previously worked as an iOS Engineer at Hubert Burda Media.
Thomas Pischke
(Co-Founder)Graduated from Ludwig-Maximilians-Universität München with a Masters's degree in Physics, with a special focus on quantum computing.
Share this job
View 27 more jobs at Trade Republic