Senior Security Engineer (AI Security)

São Paulo · Remotefull timeRemote

Apply on Employer Site

senior

H1B: yes

Nubank The Senior Security Engineer (AI Security) at Nubank leads offensive security efforts including pentests and red team operations. The role involves vulnerability management, tool building, and partnering with development teams to enhance security.

Responsibilities

Drive infrastructure, web, and mobile/API pentests end-to-end
Craft and execute red team operations that challenge defenses
Lead vulnerability management initiatives and help prioritize remediation
Build tools that enhance offensive security reviews and automate repetitive tasks
Partner with development squads to ensure security issues are understood and addressed
Contribute to architectural and logical reviews of systems and products

Qualification

Strong Offensive Security backgroundSolid knowledge across security domainsExperience with Threat Modeling

Required

Strong Offensive Security background, with a focus on Red Team activities;
Deep experience across the pentest lifecycle: reconnaissance, enumeration, exploitation, post-exploitation, lateral movement;
Strong knowledge of current and historical attack vectors, exploitation techniques, and how to remediate them;
Ability to replicate the behavior of Advanced Persistent Threat (APT) groups;
Experience with security frameworks such as OWASP;
Experience working in cloud environments (AWS preferred);
Ability to harden and improve CI/CD Pipelines and experience with SDLC;
Solid knowledge across security domains, with strong depth in Operating Systems, Networks, Databases, and Infrastructure Architecture;
Experience with Threat Modeling.

Preferred

Active participation in CTF competitions or Bug Bounty programs;
Proficiency with security assessment tools such as Burp Suite, Nmap, Metasploit, SQLmap, Nessus, Censys, Shodan, or Frida.re — or any equivalent tooling that supports security validation.