Senior Security Engineer - Application Security

The role

You will safeguard applications and the development lifecycle through proactive security integration. You will partner with engineering teams to embed security from design to deployment.

What you will do

• Partner with engineering teams to embed security into the software development lifecycle
• Conduct security code reviews, threat modeling sessions, and architecture reviews
• Design and implement SAST, DAST, and SCA solutions
• Build and maintain application security testing automation within CI/CD pipelines
• Develop secure coding standards, security libraries, and reusable security components
• Perform penetration testing and vulnerability assessments of web applications, APIs, and mobile applications
• Triage, prioritise, and remediate application vulnerabilities
• Create security champions program and provide security training to engineering teams
• Research emerging application security threats and integrate defensive measures
• Contribute to bug bounty program management and coordinate with external security researchers

Required qualifications

• 5+ years as a Security Engineer
• 4+ years focused on application security
• Deep understanding of web application security (OWASP Top 10, API security, authentication/authorization)
• Hands-on experience with security testing tools (Burp Suite, OWASP ZAP, Semgrep, etc.)
• Strong programming skills in modern languages (Python, Java, Kotlin, Go, or JavaScript)
• Experience integrating security tooling into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins)
• Expertise in secure architecture patterns for microservices, APIs, and distributed systems
• Solid understanding of cryptography, secure session management, and identity/access management
• Experience with mobile application security (iOS/Android)
• Excellent communication skills to translate security concepts for engineering audience

Nice to have

• Hands-on experience with security testing of cryptocurrency/blockchain infrastructure and applications
• Knowledge of compliance frameworks (PCI-DSS, GDPR, MaRisk)

About the company

Trade Republic is the largest savings platform in Europe, operating in 17 countries and serving over 8 million customers. The company has a mission to empower everyone to build wealth with easy, safe, and free access to financial systems.