Senior Security Engineer

About Grupo QuintoAndar
We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit:

Location & Remote Work
for technology and remote-first roles
Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

About the Team
Join QuintoAndar's core Data Platform [or Security Engineering] team to focus on building and evolving our Data Security capabilities. As a Senior Software Engineer on the Data Security Platform team, you will be instrumental in designing, developing, and maintaining the secure, scalable, and governed systems that protect our most sensitive data. You will build the platform that enables us to discover, classify, and control access to PII and other critical information, ensuring its safety and compliance across the entire company.

These are the Senior Software Engineer (Data Security Platform) responsibilities at QuintoAndar:

• Design, develop, and operate the core Data Security Platform, focusing on data discovery, classification, access control, and threat monitoring.
• Lead the implementation of tools and processes to automatically discover and classify sensitive data (like PII under LGPD/GDPR) across all of QuintoAndar's data stores (databases, data lakes, file shares, and cloud services).
• Architect and manage secure data migration strategies, ensuring sensitive data is protected as it moves from legacy systems to our central, secure data platform.
• Engineer and implement fine-grained access control systems (e.g., Attribute-Based Access Control, Role-Based Access Control) for our data warehouses and data lakes, ensuring the principle of least privilege.
• Develop and maintain integrations with internal data platforms (like DataBricks, AWS EMR) and applications to enforce data security policies via APIs.
• Ensure the security, reliability, scalability, and performance of the data security platform and its associated microservices.
• Collaborate closely with Data Governance, Legal, CyberSecurity, and other engineering teams to define and implement data protection requirements and ensure compliance.
• Improve the data-driven culture at QuintoAndar by enhancing security tools, test coverage (especially for data access), and code structure within the data security platform.
• Actively participate in software design discussions and decisions, specifically for data security components, and contribute to clear documentation.

Requirements
What we are looking for:

• Strong proficiency in a modern programming language (e.g., Python, Go, or Java) and experience with relevant frameworks (e.g., Spring Boot, FastAPI).
• Proven experience in Data Security, Data Governance, or a related platform engineering role.
• Solid understanding and practical experience with data security technologies like Data Loss Prevention (DLP), data classification, and encryption/key management.
• Experience designing, building, and consuming RESTful APIs, particularly for security and data governance functions.
• Familiarity with modern data platforms (e.g., data warehouses, data lakes) and database security principles (SQL and NoSQL).
• A strong understanding of security principles (e.g., OWASP Top 10, principle of least privilege) and data privacy regulations (LGPD, GDPR).
• Experience with public cloud platforms (AWS, GCP, or Azure) and their native data security services (e.g., AWS Macie, GCP DLP, Azure Purview).
• People that are seeking to learn, deliver real impact through high-quality, secure, and structured software, valuing work-life balance.
• Excellent English skills (verbal and written) are mandatory for documentation, technical discussions, understanding standards, and potential communication with international partners.

You'll stand out if you:

• Have hands-on experience building or integrating with established Data Security Posture Management (DSPM) or Data Classification tools (e.g., BigID, Varonis, OneTrust, ).
• Have demonstrable experience architecting or leading a complex, large-scale data migration project.
• Understand computer science fundamentals, including optimization of algorithms and distributed systems, especially as applied to scalable data security solutions.
• Have deep expertise in implementing fine-grained access control (ABAC/RBAC) in data platforms like AWS EMR or Databricks.
• Understand modern CI/CD practices and pipelines and have experience with Infrastructure as Code (IaC) tools like Terraform.
• Have experience with containers and container-orchestration.
• Have experience with Identity and Access Management (IAM) systems and how they integrate with data platforms.
• Understand advanced encryption, tokenization, and data masking techniques.

Important

• Our hiring process starts with the application If you truly want to be part of our team, please complete this step of the process. We analyze all candidates individually and provide feedback to all applicants.
• All communication will be conducted via email, so please stay tuned for our messages and release the domain to ensure our emails are not sent to spam.

Benefits

• Competitive salary
• Profit sharing
• Meal allowance
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother's Day, and Father's Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions
• Reading kit for children – PlayKids

Diversity & Inclusion at Grupo QuintoAndar
We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals

You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

Privacy and Data Protection
The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates. For questions or to exercise your rights as a data subject, please contact us through our Service Channel.