Nubank Senior Security Engineer responsible for incident response, investigation, and automation at Nubank. Act as technical Incident Commander during major crises and develop SOAR playbooks and Python tools.
Responsibilities
The Nubank Security team actively seeks out potential security threats to protect both our customers and Nubankers. We respond swiftly to security incidents, conduct thorough investigations, and implement measures to mitigate risks. Our strong engineering capabilities allow us to reduce response times through automation and specialized micro-services.
Our Incident Response Team is focused on managing incidents and is constantly enhancing its skills and maturity. Additionally, the Nubank CSIRT is a proud member of the FIRST (Forum of Incident Response and Security Teams) community. You can find more about Nubank Infosec here:
Investigate complex cases to understand the mechanisms of abuse and guide strategies to mitigate or detect the anomaly
Incident Command: Act as the technical Incident Commander during major crises, coordinating technical workstreams and providing clear, data-driven updates to stakeholders.
Engineering & Automation: Drive the creation and refinement of SOAR playbooks and Python-based tools to automate repetitive tasks and scale the operation.
Data Interpretation: Analyze large datasets to identify emerging threat trends, supporting long-term detection improvements and quantifying risk.
We are looking for a person who has
Proven IR Experience: Solid experience as an Incident Response Analyst/Specialist, with a track record of handling investigations in complex, high-scale environments.
Technical Authority: Deep understanding of security vulnerabilities, attacker TTPs (Mitre ATT&CK), and modern remediation methodologies.
Cloud IR Mastery: Hands-on experience with incident response and management within cloud infrastructures (AWS/GCP/Azure).
Automation Engineering: Strong skills in Python and SOAR platforms to build self-healing or automated response workflows.
Qualification
Proficient in English
Required
Proven IR Experience as an Incident Response Analyst/Specialist
Deep understanding of security vulnerabilities and attacker TTPs (Mitre ATT&CK)
Hands-on experience with incident response in cloud infrastructures (AWS/GCP/Azure)
