Senior IT Security Engineer at Trade Republic

Berlin

on-site · full-time · Visa sponsorship

Apply for this role at Trade Republic

Responsibilities:
- Architect and maintain defenses for the global workforce and internal infrastructure.
- Manage endpoint security (deploy and operate EDR/XDR across macOS, Windows, Linux).
- Design and implement IAM workflows: SSO, MFA, automated joiner/mover/leaver processes.
- Secure corporate networks: firewalls, VPNs, SD-WAN and implement Zero Trust (ZTNA).
- Define MDM baselines and hardening standards (e.g., Jamf) to enforce compliant-only access.
- Drive vulnerability management and patch automation for non-cloud assets within SLA.
- Operate Network Access Control (802.1X) and tune endpoint DLP controls.
- Lead phishing simulation programs and deploy tools for email analysis and security awareness.

Requirements:
- 5+ years as a Security Engineer with substantial enterprise/corporate security experience.
- Deep experience with modern identity providers (Okta, Google Workspace) and passwordless approaches.
- Proven track record managing enterprise EDR (CrowdStrike, SentinelOne) and MDM (Jamf) at scale.
- Strong knowledge of networking fundamentals (switching, routing, firewalling) and NAC practices.
- Practical experience applying hardening standards (CIS Benchmarks, NIST) to endpoints and office infrastructure.
- Experience operating in regulated/financial environments and handling compliance requirements.
- Strong communication and collaboration skills to work with IT, engineering, and business teams.