Senior Security Engineer (Blockchain Security) - BR - 2026
Nubank
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
Nubank is hiring a Senior Security Engineer to own the security posture of its crypto operations. You’ll think like an attacker to identify vulnerabilities before adversaries, and you’ll build security services, from ingress controls to automated reviews, ensuring compliance and scalability.
You’ll collaborate with product/engineering to design secure blockchain architectures, apply secure‑by‑design practices, and stay current on threats.
Qualifications
- Strong product security and/or offensive security background (penetration testing, vulnerability assessment, attack simulation, incident response).
- Experience embedding security into product development: threat modeling, secure SDLC, security‑by‑design reviews.
- Hands‑on software engineering ability: build/operate security services and automation; production code in a modern language (Clojure experience preferred).
- Solid blockchain/cryptocurrency fundamentals to reason about security of wallets, keys, and smart contracts.
- Knowledge of attack vectors and exploits; remediation approaches.
- Experience with OWASP and NIST CSF.
- Fluency with AI‑assisted engineering and evaluating AI outputs.
- Familiarity with AWS and operating systems, networks, databases, and infrastructure.
Responsibilities
- Apply an offensive security mindset to crypto and blockchain products: simulate attacks, perform tests, and turn findings into mitigations.
- Drive product security across the crypto portfolio: threat modeling, secure-by-design reviews, secure development integration.
- Build/operate in‑house security services and tooling for crypto products: hardened ingress, monitoring, secret‑management, automated security reviews.
- Ensure regulatory alignment: map controls to regulations, support audits, provide evidence to regulators and risk teams.
- Collaborate with product/engineering to design secure blockchain architecture and embed security‑by‑design in new products.
- Contribute to security policies, standards, and governance for blockchain security operations.
- Leverage AI to enhance security work: AI-assisted threat modeling, code reviews, vulnerability review, attack simulation.
- Stay updated on emerging attack vectors and share knowledge across the team.
Skills
Tools
Job description
Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.
Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.
Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks. Visit our institutional page: https://www.nu.com/2026-en
Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.
Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.
Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/
The Blockchain Security team sits within the Product Security & Assurance BA, part of the Information Technology and Security (ITSec) BU. Our mission is to support the security of Nu's crypto operation. In the context of Nu's global expansion, keeping these products secure, and demonstrably compliant with financial regulators, is a direct condition for our ability to operate and grow.
As a Senior Security Engineer on this team, you own the security posture of our crypto operation. You are the person who thinks like an attacker so our products can withstand real ones: finding vulnerabilities before adversaries do, embedding product security into how crypto products are designed and built, and making sure our controls satisfy both internal risk standards and external regulatory requirements. You won’t just run security tools. You'll build and operate the ones that protect our crypto products, from hardened ingress and monitoring/alerting systems to secure secret‑management and automated security‑review tooling. Your work directly protects customer funds and Nu's ability to run crypto products at scale.
Applying an offensive security mindset to our crypto and blockchain products: simulating attacks, running penetration tests and security assessments, and turning findings into concrete mitigations.
Driving product security across the crypto portfolio: threat modeling, security‑by‑design reviews, and embedding secure practices into the development lifecycle.
Building, operating, and improving in‑house security services and tooling that integrate directly with our crypto products, for example hardened ingress/edge controls, security monitoring and anomaly alerting, secure secret‑management, and automated security‑review tooling.
Ensuring our crypto operation meets regulatory requirements: mapping controls to applicable regulations, supporting audits, and producing the evidence regulators and internal risk teams expect.
Collaborating with product and engineering teams to design secure blockchain architecture and embed security‑by‑design into new products.
Contributing to security policies, standards, and guidelines that govern blockchain security operations.
Using AI to raise the leverage and quality of security work: building and running AI‑assisted tooling for tasks like threat modeling, code and vulnerability review, and attack simulation, and helping the team push the frontier of what AI‑first security engineering looks like.
Staying current on emerging attack vectors, exploits, and best practices across product and blockchain security, and sharing that knowledge across the team.
Must have
Strong product security and/or offensive security background (penetration testing, vulnerability assessment, attack simulation, incident response).
Experience embedding security into product development: threat modeling, secure SDLC, security‑by‑design reviews.
Hands‑on software engineering ability: you can build and operate security services and automation, not just use off‑the‑shelf tools. Comfortable writing production code (we work heavily in Clojure; strong experience in any modern language plus willingness to learn Clojure is fine).
Solid working knowledge of blockchain and cryptocurrency fundamentals, including how blockchains, wallets, keys, and smart contracts work, enough to reason about their security (expert‑level depth not required, but real familiarity is).
Strong knowledge of recent and past attack vectors and exploits, and how to remediate them.
Experience with security frameworks such as OWASP and the NIST Cybersecurity Framework (CSF).
Fluency with AI‑assisted engineering: using coding agents and LLMs in daily work, with good judgment about where they help, where they don’t, and how to review their output critically.
Familiarity with AWS, and solid grounding in operating systems, networks, databases, and infrastructure architecture.
Ability to work autonomously and proactively, strong analytical/problem‑solving skills, and clear written and spoken English for technical and non‑technical audiences.
Nice to have
Deeper knowledge of blockchain/crypto internals: consensus algorithms, cryptographic protocols, smart contracts.
Experience auditing smart contracts (e.g. Solidity) or working with DeFi protocols.
Experience integrating with third‑party crypto custody/infrastructure providers (e.g. Fireblocks, Circle, and similar).
Exposure to regulatory or compliance requirements in a financial or crypto context.
Experience with bug bounties and/or CTFs.
Certifications such as OSCP, OSWE, or Certified Blockchain Security Professional.
São Paulo, Brazil
Campinas, Brazil
Rio de Janeiro, Brazil
Belo Horizonte, Brazil
Chance of earning equity at Nubank
Food/ Meal Card (Vale‑Refeição and/or Vale Alimentação)
Public Transportation Commuting Benefit (Vale‑Transporte)
NuCare – Psychological, Financial, and Legal Assistance Program
Life Insurance
Medical Plan
Dental Plan
NuLanguage – Language Course Program
Nucleo – Our learning platform of courses
Extended Parental Leave
Daycare Allowance
Parental Consultancy
Work‑from‑home Allowance
Gym Partnerships
30 days of paid vacation
Relocation Assistance Package, if applicable
Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
