Senior Security Engineer - Cloud Security
Please note that this position is based in Berlin or London.
THE BEST WORK OF YOUR CAREER
Trade Republic is the largest savings platform in Europe - we operate in 17 countries, serving +8 million customers who trusted us with over 100B in assets. But we’re striving for more.
We have a bold mission to empower everyone to build wealth with easy, safe, and free access to financial systems. You will have the opportunity to grow your career by collaborating with a team of outstanding talents and state of the art technology to build a lasting, positive future for millions.
WHAT YOU'LL BE DOING
As a Senior Security Engineer in our Cloud Security team, you'll architect and maintain secure cloud infrastructure that protects Trade Republic's critical systems and customer data. Your responsibilities include:
- Design and implement security controls for cloud infrastructure across AWS environments;
- Build and maintain Infrastructure as Code (IaC) security standards and automated compliance validation;
- Develop cloud security automation using Terraform, CloudFormation, and Python to enforce security baselines;
- Implement and optimise Cloud Security Posture Management (CSPM) solutions and remediation workflows;
- Architect secure network segmentation, VPCs, security groups, and zero-trust network access solutions;
- Manage identity and access management (IAM) policies, service control policies, and least privilege frameworks;
- Monitor and respond to cloud security events using CloudTrail, GuardDuty, Security Hub, and SIEM integration;
- Conduct security assessments of Kubernetes clusters, container registries, and serverless architectures;
- Collaborate with platform and infrastructure teams to harden cloud environments and resolve security findings;
- Drive cloud security initiatives including encryption strategies, secrets management, and data protection controls;
- Evaluate and integrate cloud-native security tools for runtime protection and threat detection
WHAT WE'RE LOOKING FOR
Core Experience:
- 5+ years as a Security Engineer with 4+ years specialising in cloud security
- Deep AWS security expertise (IAM, VPC, Security Hub, GuardDuty, KMS, CloudTrail, Config)
- Advanced Infrastructure as Code skills (Terraform required, CloudFormation)
- Strong understanding of Kubernetes security (RBAC, network policies, Pod Security Standards)
- Experience with container security tools (Falco, Trivy, etc)
- Proficiency in Python and automation for security policy enforcement
- Knowledge of security frameworks and cloud compliance (ISO 27001, SOC 2, CIS Benchmarks)
- Experience with DevSecOps practices and security integration in CI/CD pipelines
- Understanding of network security, TLS/mTLS, service mesh architectures
- Multi-cloud experience (GCP, Azure) is advantageous
- Knowledge of financial services regulations (MaRisk, BAIT, GDPR) is a plus
WHY YOU SHOULD APPLY NOW
Our culture rewards ownership, excellence, and high energy. We care deeply about outcomes and hold each other accountable - we’re here to win and fix one of the largest challenges Europeans face - closing the pension gap and democratising wealth. If this gets you fired up, reach out!
We believe it’s our team’s varied identities and backgrounds that make us sharper and stronger. We’re committed to creating an environment where everyone feels respected and has equal opportunity to thrive in their careers. For any questions on DEI during the interview process, reach out to your recruitment partner.