Grupo QuintoAndar | Sênior Security Engineer (DataSecurity)

Grupo QuintoAndar; Brasil; Presencial; BRL 240 000 - 420 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Profit sharing

Health insurance

Life insurance

Childcare subsidy

Home office allowance

Employee assistance program

Resumo da oferta

Grupo QuintoAndar is actively hiring a Senior Security Engineer focused on Data Security to design protections for data lakes, warehouses, and cloud storage. You will implement DSPM, classify and monitor sensitive data, and collaborate with data engineering teams to secure pipelines.

The role requires deep data security expertise, scripting and IaC skills, and fluency in Portuguese and English. Remote-first with optional biweekly office days in Brazil is offered, along with comprehensive

Qualificações

• Strong data security expertise including DLP, encryption, tokenization and masking.
• Experience securing data lakes/warehouses and cloud storage (AWS/GCP).
• Proficiency in scripting (Python/Bash) and IaC (Terraform).
• Ability to threat-model data flows and design pragmatic mitigations.
• Fluency in Portuguese and advanced English; written docs in English.

Responsabilidades

• Design and deploy data protection strategies across Databricks, S3, BigQuery, and related cloud services.
• Lead DSPM tool implementation, data discovery, classification, and monitoring of sensitive data (PII/PCI).
• Embed security controls into ETLs and data pipelines; apply masking/tokenization tech before non-prod storage.
• Architect and manage DLP ecosystems; write automation to triage alerts and integrate with SOAR.
• Enforce cloud data posture and encryption policies via IaC (Terraform).
• Collaborate with CyberSecurity, Data Governance, Legal, IT to translate LGPD/GDPR into scalable controls.

Conhecimentos

Data security

DSPM

Encryption

Tokenization

Data masking

Python

Terraform

Cloud security

Threat modeling

English proficiency

Formação académica

Bachelor's degree in CS/Engineering

Ferramentas

Databricks

AWS

GCP

SOAR

KMS/Vault

Descrição da oferta de emprego

About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit:https://grupoquintoandar.com/pt/ .

Location & Remote Work

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

Hiring Process Stages

The stages of our hiring processes aim to assess your experiences and allow you to meet our teams and explore career opportunities. They are structured as follows.

• Application
• Interview with Recruiters
• Tech Screening with Engineering Team (Architecture & Security Scenarios)
• Offer

About the Team

Join QuintoAndar's core Cybersecurity team to build and evolve our Data Security capabilities. This area is focused on protecting customer-sensitive data at extreme scale across our entire cloud and data ecosystem.

As a Senior Security Engineer focusing on Data Security, you are a security architect and integrator. We don't want you just reading alerts on a dashboard, nor do we expect you to build backend applications from scratch. We want you to design the security controls, implement enterprise Data Security tools, and write the automations that ensure our data pipelines and storage environments are secure by design.

These are the Senior Security Engineer (Data Security) responsibilities at QuintoAndar:

• Data Security Architecture: Design and deploy comprehensive data protection strategies across QuintoAndar's ecosystem, including Data Lakes (Databricks), Cloud Storage (AWS S3, GCP), and corporate SaaS environments.
• DSPM & Sensitive Data Mapping: Lead the technical implementation and tuning of Data Security Posture Management (DSPM) tools to automatically discover, classify, and monitor sensitive data (PII/PCI) continuously.
• Secure Data Engineering: Partner closely with Data Engineering and Machine Learning teams to embed security controls directly into ETLs and data pipelines (e.g., implementing data masking, anonymization, and tokenization techniques before data lands in non-prod environments).
• DLP Strategy & Automation: Architect and manage our Data Loss Prevention (DLP) ecosystem. Write automation scripts (using Python, APIs) to triage alerts, reduce false positives, and orchestrate incident response via SOAR platforms.
• Cloud Data Posture: Enforce strict data sharing, encryption, and retention policies using Infrastructure as Code (e.g., Terraform) across our cloud platforms to prevent accidental data exposure.
• Cross-Functional Enablement: Act as the technical bridge between CyberSecurity, Data Governance, Legal, and IT, translating complex privacy frameworks (LGPD, GDPR) into scalable technical controls and guardrails.

Security Level

We want to have as many talented people as possible in our team. So, although this position is described as “Senior Security Engineer”, you can apply even if you don’t consider yourself as a senior professional yet. It’s important to us to create a qualified talent poll and we will definitely reach out to you if we think you can add to our teams, no matter what seniority level you are today.

Requirements

What we are looking for:

• Deep Data Security Expertise: Strong conceptual and practical understanding of data protection techniques: Data Loss Prevention (DLP), encryption (at-rest and in-transit), tokenization, hashing, and dynamic data masking.
• Cloud & Data Ecosystems: Practical experience securing modern data architectures (Data Lakes, Data Warehouses) and cloud-native storage in AWS or GCP (e.g., S3, RDS, BigQuery, Databricks).
• Scripting & Automation: Proficiency in scripting languages (like Python or Bash) to interact with APIs, build automations, and integrate security tools. You are comfortable writing Terraform or similar IaC to enforce security postures.
• Analytical Problem Solving: Strong ability to threat-model complex data flows, identify exposure risks, and design pragmatic mitigation strategies without blocking business agility.
• Languages: Fluency in Portuguese and advanced English - we usually use English to write documentation, reference materials, and talk to partners and co-workers from other countries.

You´ll stand out if you

• Have hands-on experience implementing and scaling Data Security Posture Management (DSPM) platforms (e.g., Cyera, Wiz, Securiti.ai, BigID) in enterprise environments.
• Have a background in Data Engineering or database administration, giving you a deep understanding of how complex data pipelines (Airflow, Spark, Kafka) operate from the inside out.
• Possess deep knowledge of applied cryptography and enterprise key management systems (e.g., AWS KMS, HashiCorp Vault).
• Have practical experience using AI tools or LLMs to speed up data classification, reduce false positives in DLP, or automate security engineering tasks.

Important

• Our hiring process starts with the application! If you truly want to be part of our team, please complete this step of the process. We analyze all candidates individually and provide feedback to all applicants.
• All communication will be conducted via email, so please stay tuned for our messages and release the domain @quintoandar.com.br to ensure our emails are not sent to spam.
• Profit sharing
• Health insurance
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions

Diversity & Inclusion at Grupo QuintoAndar

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!

You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

Privacy and Data Protection

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates . For questions or to exercise your rights as a data subject, please contact us through our Service Channel .

Apply for this job

*

indicates a required field

First Name *

Last Name *

Email *

Phone

Country *

Phone *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Education

School Select...

Select...

Select...

Select...

Accepted file types: pdf, doc, docx, txt, rtf

Select...

Select...

CPF: *

Select...

LinkedIn: *

GitHub:

Select...

Select...

Select...

Select...

Select...

Select...

Select...