Senior Security Engineer

Senior Security Engineer - Offensive Security Join to apply for the Senior Security Engineer – Offensive Security role at Nubank About Nubank Founded in 2013, Nubank seeks to free people from a bureaucratic, slow, and inefficient financial system. Through innovative technology and outstanding customer service, it has redefined people’s relationships with money across Latin America. With operations in Brazil, Mexico, and Colombia, Nubank today stands among the largest digital banking platforms and technology‑leading companies globally. About The Team We are seeking curious, driven individuals passionate about enhancing security maturity through live attacks. As a Senior Security Engineer on the Offensive Security team, you’ll help teams across Nubank understand and collaborate with offensive security initiatives. You’ll work closely with security engineers, product teams, and other stakeholders to embed secure development practices into our products and services from the ground up, strengthening our security posture and evolving our defense strategies to stay ahead of adversaries. As An Offensive Security Engineer, You’re Expected To Perform infrastructure, web, and mobile/API penetration tests Craft and execute red team operations Help with vulnerability management Code tools that assist with offensive security reviews Support operations to fix vulnerabilities and help development squads to understand security issues Assist in architectural and logical reviews of different software What are we looking for? Offensive Security background with a focus on Red Team activities Experience with all stages of a pentest: reconnaissance, enumeration, exploitation, post‑exploitation, lateral movement, etc. Strong knowledge of recent and past attack vectors, how to exploit them, and how to mitigate them Ability to reproduce the behavior of Advanced Persistent Threat (APT) groups Experience with security frameworks such as OWASP Familiarity with AWS general concepts Ability to harden and improve CI/CD pipelines and experience with SDLC General knowledge of all security scopes, with deep expertise in operating systems, networks, databases, and infrastructure architecture Experience with threat modeling Active participation in the CTF scene or Bug Bounty programs (a plus) Experience with security assessment tools (especially Burp Suite, and familiarity with Nmap, Metasploit, SQLmap, Nessus, Censys, Shodan, Frida.re, and other tools that aid in assessing and validating security) We value great team chemistry, enthusiasm for building things, and a willingness to keep learning when we stay humble and open‑minded. Good computer science fundamentals and English language skills are essential. Benefits Health, dental, and life insurance Meal allowance Transportation assistance 30 days of paid vacation Equity at Nubank Parking partnership – discounted parking in our office Free bike parking with showers available NuCare – Our mental health and wellness assistance program NuLanguage – Our language learning program Gympass partnership Extended maternity and paternity leave Child care allowance ‘Espaço Feijão’ – Private nursing and breastfeeding spaces in our buildings Onsite health center – Medical support for every Nubanker in our office Work Model for this Role Hybrid: 2–3 times per week in the office, on strategic days designed to maximize team connection and collaboration. For more details, visit Seniority Level Mid‑Senior level Employment type Full‑time Job function Information Technology #J-18808-Ljbffr