Senior Security Engineer (Purple Teaming)

Join Trade Republic as a Senior Security Engineer in Purple Teaming. In this role, you will plan and execute purple team exercises to protect critical systems and customer data. You will design attack scenarios, assess existing security controls, conduct deep-dive assessments, develop and tune SIEM detections, validate alert quality, and support incident response playbooks. You should have 5+ years of experience as a Security Engineer, with a strong understanding of real-world attacker behavior and experience in regulated environments.

• Plan and execute purple team exercises aligned to real-world threat actors to protect critical systems and customer data.
• Design attack scenarios covering various stages of an attack, and coordinate with business and engineering teams to ensure testing activities align with business risk.
• Assess existing security controls, conduct deep-dive assessments of internal networks, applications, and cloud infrastructure, and develop and tune SIEM detections.
• Experience operating in regulated or compliance‑driven environments (MaRisk, BAIT, GDPR)
• 5+ years as a Security Engineer with 3+ years specializing in Purple/Red/Blue Teaming
• Strong understanding of real‑world attacker behavior, not just theoretical frameworks
• Experience running or leading purple team exercises in enterprise environments
• Proficiency in Python, Go or other scripting language
• Multi-cloud experience (GCP, Azure) is advantageous
• Strong understanding of cloud security (AWS) and Kubernetes security
• Experience with SIEM solutions, preferably Google SecOps
• Experience with Endpoint Detection & Response (EDR) tools such as SentinelOne or CrowdStrike
• Good understanding of macOS security