{"id":1873179,"url":"https://alion.io/job/trade-republic-senior-security-engineer-application-security","title":"Senior Security Engineer - Application Security","company":{"id":4736,"name":"Trade Republic","domain":"traderepublic.com","url":"https://alion.io/company/trade-republic","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"C","score":59,"open_postings":42,"ghost_share":0.69,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berlin, Germany","London, United Kingdom"],"countries":["DE","GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":76000,"max_usd":143000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"Kotlin","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Semgrep","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2025-08-15T14:03:04Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-16T09:48:55Z","board_verified":true,"closed_at":null,"days_open":426,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":426},"description":"Please note that this position is based in Berlin or London. \nTHE BEST WORK OF YOUR CAREER \nTrade Republic is the largest savings platform in Europe - we operate in 17 countries, serving +8 million customers who trusted us with over 100B in assets. But we’re striving for more.\nWe have a bold mission to empower everyone to build wealth with easy, safe, and free access to financial systems. You will have the opportunity to grow your career by collaborating with a team of outstanding talents and state of the art technology to build a lasting, positive future for millions.\nWHAT YOU'LL BE DOING\nAs a Senior Security Engineer in our Application Security team, you'll safeguard Trade Republic's applications and development lifecycle through proactive security integration and engineering excellence. Your responsibilities include:\nPartner with engineering teams to embed security into the software development lifecycle from design to deployment;\nConduct security code reviews, threat modeling sessions, and architecture reviews for critical applications and services;\nDesign and implement SAST, DAST, and SCA solutions to identify vulnerabilities early in the development process;\nBuild and maintain application security testing automation within CI/CD pipelines;\nDevelop secure coding standards, security libraries, and reusable security components for engineering teams;\nPerform penetration testing and vulnerability assessments of web applications, APIs, and mobile applications;\nTriage, prioritise, and remediate application vulnerabilities working closely with development teams;\nCreate security champions program and provide security training to engineering teams;\nResearch emerging application security threats and integrate defensive measures into the security architecture;\nContribute to bug bounty program management and coordinate with external security researchers\nWHAT WE'RE LOOKING FOR\nCore Experience:\n5+ years as a Security Engineer with 4+ years focused on application security\nDeep understanding of web application security (OWASP Top 10, API security, authentication/authorization)\nHands-on experience with security testing tools (Burp Suite, OWASP ZAP, Semgrep, etc.)\nStrong programming skills in modern languages (Python, Java, Kotlin, Go, or JavaScript)\nExperience integrating security tooling into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins)\nExpertise in secure architecture patterns for microservices, APIs, and distributed systems\nSolid understanding of cryptography, secure session management, and identity/access management\nHands-on experience with security testing of cryptocurrency/blockchain infrastructure and applications is a major bonus\nExperience with mobile application security (iOS/Android)\nKnowledge of compliance frameworks (PCI-DSS, GDPR, MaRisk) is advantageous\nExcellent communication skills to translate security concepts for engineering audience\n\nWHY YOU SHOULD APPLY NOW\nOur culture rewards ownership, excellence, and high energy. We care deeply about outcomes and hold each other accountable - we’re here to win and fix one of the largest challenges Europeans face - closing the pension gap and democratising wealth. If this gets you fired up, reach out!\nWe believe it’s our team’s varied identities and backgrounds that make us sharper and stronger. We’re committed to creating an environment where everyone feels respected and has equal opportunity to thrive in their careers. For any questions on DEI during the interview process, reach out to your recruitment partner.","description_format":"text","description_chars":3530,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Investing Apps & Robo-Advisors","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-10-04T21:44:03Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.203,"p_room":0.28,"age_days":426,"expected_fill_days":38,"reasons":["conf:1","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/trade-republic-senior-security-engineer-application-security","json_url":"https://alion.io/job/trade-republic-senior-security-engineer-application-security.json","meta":{"generated_at":"2026-10-16T10:29:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8855,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4736},"rest":"https://alion.io/mcp/rest/get_company?id=4736"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrade-republic-senior-security-engineer-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrade-republic-senior-security-engineer-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrade-republic-senior-security-engineer-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/trade-republic-senior-security-engineer-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrade-republic-senior-security-engineer-application-security"}]}