Senior Security Engineer - Purple Teaming

The role

You will plan and execute purple team exercises to protect critical systems and customer data. You will design attack scenarios and assess security controls to ensure effectiveness.

What you will do

• Design attack scenarios covering initial access, persistence, lateral movement, privilege escalation, command-control, and exfiltration
• Coordinate with business and engineering teams to gather requirements and ensure testing aligns with business risk
• Assess existing security controls to ensure they are effective
• Conduct deep-dive assessments of internal networks, applications, and cloud infrastructure
• Develop and tune SIEM detections, analytics rules, and alerts
• Validate alert quality, reduce false positives, and improve signal-to-noise ratio
• Validate coverage of detections against known TTPs and identify detection gaps
• Support and enhance incident response playbooks, escalation paths, and response automation
• Conduct hypothesis-driven threat hunts based on attacker tradecraft and threat intelligence

Required qualifications

• 5+ years as a Security Engineer
• 3+ years specializing in Purple/Red/Blue Teaming
• Experience running or leading purple team exercises in enterprise environments
• Strong understanding of real-world attacker behavior
• Experience operating in regulated or compliance-driven environments (MaRisk, BAIT, GDPR)
• Strong understanding of cloud security (AWS) and Kubernetes security
• Good understanding of macOS security
• Experience with SIEM solutions
• Experience with Endpoint Detection & Response (EDR) tools such as SentinelOne or CrowdStrike
• Proficiency in Python, Go or other scripting language

Nice to have

• Google SecOps
• Multi-cloud experience (GCP, Azure)

About the company

Trade Republic is the largest savings platform in Europe, operating in 18 countries and serving over 10 million customers. The company aims to empower everyone to build wealth with easy, safe, and free access to financial systems.