Senior Security Engineer - Purple Teaming

Trade Republic; Berlin; Vor Ort; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

Trade Republic is seeking a Senior Security Engineer specializing in Purple Teaming to protect critical systems and customer data. The role involves planning and executing exercises aligned to real-world threats, designing attack scenarios, and assessing security controls.

Applicants should have at least 5 years of experience, particularly in cloud security and incident response automation. Candidates with strong Python skills will be prioritized. The position is based in Berlin, Germany.

Qualifikationen

• 5+ years as a Security Engineer, focusing on Purple/Red/Blue Teaming.
• Experience running purple team exercises in enterprise environments.
• Strong understanding of real-world attacker behavior.

Aufgaben

• Plan and execute purple team exercises to protect critical systems.
• Design scenarios covering access, persistence, and exfiltration.
• Coordinate with teams to gather requirements and understand constraints.

Kenntnisse

Purple/Red/Blue Teaming

Cloud security (AWS)

Python scripting

Kubernetes security

Incident response automation

Operating in regulated environments

Tools

SentinelOne

CrowdStrike

Google SecOps

Jobbeschreibung

Requirements

• 5+ years as a Security Engineer with 3+ years specializing in Purple/Red/Blue Teaming
• Experience running or leading purple team exercises in enterprise environments
• Strong understanding of real‑world attacker behavior, not just theoretical frameworks
• Experience operating in regulated or compliance‑driven environments (MaRisk, BAIT, GDPR)
• Strong understanding of cloud security (AWS) and Kubernetes security
• Good understanding of macOS security
• Experience with SIEM solutions, preferably Google SecOps
• Experience with Endpoint Detection & Response (EDR) tools such as SentinelOne or CrowdStrike
• Proficiency in Python, Go or other scripting language
• Multi-cloud experience (GCP, Azure) is advantageous

What the job involves

• As a Senior Security Engineer in Purple Teaming, you'll plan and execute purple team exercises aligned to real‑world threat actors to protect Trade Republic's critical systems and customer data
• Design attack scenarios covering initial access, persistence, lateral movement, privilege escalation, command‑and‑control, and exfiltration
• Coordinate with business and engineering teams to gather requirements, understand operational constraints, and ensure testing activities align with business risk
• Assess existing security controls to ensure they aren't just "active," but actually effective
• Conduct deep‑dive assessments of internal networks, applications, and cloud infrastructure
• Develop and tune SIEM detections, analytics rules, and alerts based on attack simulations and real incidents together with the Security Operations team
• Validate alert quality, reduce false positives, and improve signal‑to‑noise ratio
• Validate coverage of detections against known TTPs and identify detection gaps
• Support and enhance incident response playbooks, escalation paths, and response automation
• Conduct hypothesis‑driven threat hunts based on attacker tradecraft and threat intelligence