Senior Security Engineer (Incident Response)

Nubank; São Paulo; Híbrido; BRL 150 000 - 230 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Equity

Meal Card

Public Transportation Benefit

Medical Plan

Dental Plan

Life Insurance

Parental Benefits

Work-from-home Allowance

Gym Partnerships

30 days paid vacation

Relocation Assistance

Resumo da oferta

Nubank’s Security team seeks an Incident Response Analyst to investigate threats, coordinate technical workstreams, and automate tasks with SOAR and Python. You will analyze data to detect trends and quantify risk.

The role demands IR experience, knowledge of MITRE ATT&CK, cloud IR in AWS/GCP/Azure, and strong English for global collaboration. Hybrid work 2–3 days/week across multiple Brazilian cities.

Qualificações

• Proven IR Experience: solid experience as an Incident Response Analyst/Specialist.
• Deep understanding of security vulnerabilities, attacker TTPs (MITRE ATT&CK), and remediation methodologies.
• Hands-on experience with incident response in cloud infrastructures (AWS/GCP/Azure).
• Automation skills using Python and SOAR to build automated workflows.
• Ability to translate complex findings into clear, actionable reports.

Responsabilidades

• Investigate complex cases to understand abuse mechanisms and guide mitigation strategies.
• Act as the technical Incident Commander during major crises, coordinating workstreams and providing data-driven updates to stakeholders.
• Drive the creation and refinement of SOAR playbooks and Python-based tools to automate repetitive tasks.
• Analyze large datasets to identify threat trends, supporting long-term detection improvements and risk quantification.

Conhecimentos

Incident Response

Cloud Security

MITRE ATT&CK

Automation mindset

Communication

English proficiency

Ferramentas

Python

SOAR platforms

Cloud tooling

Descrição da oferta de emprego

About Nu

Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.

Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.
Visit our Institutional Page

About the role

The Nubank Security team actively seeks out potential security threats to protect both our customers and Nubankers. We respond swiftly to security incidents, conduct thorough investigations, and implement measures to mitigate risks. Our strong engineering capabilities allow us to reduce response times through automation and specialized micro-services.

Our Incident Response Team is focused on managing incidents and is constantly enhancing its skills and maturity. Additionally, the Nubank CSIRT is a proud member of the FIRST (Forum of Incident Response and Security Teams) community. You can find more about Nubank Infosec here:

https://blog.nubank.com.br/infosec-nubank-protecao-dados/

You will be responsible for

• Investigate complex cases to understand the mechanisms of abuse and guide strategies to mitigate or detect the anomaly

• Incident Command: Act as the technical Incident Commander during major crises, coordinating technical workstreams and providing clear, data-driven updates to stakeholders.

• Engineering & Automation: Drive the creation and refinement of SOAR playbooks and Python-based tools to automate repetitive tasks and scale the operation.

• Data Interpretation: Analyze large datasets to identify emerging threat trends, supporting long-term detection improvements and quantifying risk.

We are looking for a person who has

• Proven IR Experience: Solid experience as an Incident Response Analyst/Specialist, with a track record of handling investigations in complex, high-scale environments.

• Technical Authority: Deep understanding of security vulnerabilities, attacker TTPs (Mitre ATT&CK), and modern remediation methodologies.

• Cloud IR Mastery: Hands-on experience with incident response and management within cloud infrastructures (AWS/GCP/Azure).

• Automation Engineering: Strong skills in Python and SOAR platforms to build self-healing or automated response workflows.

• Communication: Ability to translate complex technical findings into clear, actionable reports for both technical peers and executive leadership.

• English Proficiency: Proficient in both understanding and speaking English for global collaboration.

Location for this opportunity (City, Country)

• São Paulo, Brazil

• Campinas, Brazil

• Rio de Janeiro, Brazil

• Belo Horizonte, Brazil

Benefits

• Chance of earning equity at Nubank

• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)

• Public Transportation Commuting Benefit (Vale-Transporte)

• NuCare – Psychological, Financial and Legal Assistance Program

• Life Insurance

• Medical Plan

• Dental Plan

• NuLanguage – Language Course Program

• Nucleo - Our learning platform of courses

• Extended Parental Leave

• Daycare Allowance

• Parental Consultancy

• Work-from-home Allowance

• Gym Partnerships

• 30 days of paid vacation

• Relocation Assistance Package, if applicable

Work Model for this Role

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.
To maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here