Senior Security Engineer – Offensive Security

Nubank

. Drive infrastructure, web, and mobile/API pentests end-to-end .

Posted 9/18/2026full-timeSão Paulo • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Offensive Security and Red Team operations, with a strong focus on vulnerability management, pentesting, and security frameworks. Proficient in utilizing security assessment tools and enhancing CI/CD pipelines within cloud environments.

Highest-signal resume keywords

Offensive SecurityRed Team ActivitiesPentest LifecycleSecurity Assessment ToolsCloud Environments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementPentestingThreat ModelingExploitation TechniquesCI/CD Pipeline HardeningOperating Systems KnowledgeNetwork SecurityDatabase SecurityInfrastructure ArchitectureAdvanced Persistent Threat Behavior

Soft Skills

CollaborationEducationGuidanceSupport

Tools & Technologies

Burp SuiteNmapMetasploitSQLmapNessusCensysShodanFrida

Industry Keywords

OWASPCTF CompetitionsBug Bounty ProgramsCloud SecuritySecurity Frameworks

Tech Stack

Tools & technologies

AWSCloudSDLC

About the role

Key responsibilities & impact

Drive infrastructure, web, and mobile/API pentests end-to-end
Craft and execute red team operations that challenge defenses
Lead vulnerability management initiatives and help prioritize remediation
Build tools that enhance offensive security reviews and automate repetitive tasks
Partner with development squads to ensure security issues are understood and addressed at the root
Contribute to architectural and logical reviews of different systems and products
Work closely with security engineers, product teams, and other stakeholders to educate, guide, and support secure development
Identify and mitigate security threats before they impact customers, employees, and financial assets

Requirements

What you’ll need

Strong Offensive Security background, with a focus on Red Team activities
Deep experience across the pentest lifecycle: reconnaissance, enumeration, exploitation, post-exploitation, lateral movement
Strong knowledge of current and historical attack vectors, exploitation techniques, and how to remediate them
Ability to replicate the behavior of Advanced Persistent Threat (APT) groups
Experience with security frameworks such as OWASP
Experience working in cloud environments (AWS preferred)
Ability to harden and improve CI/CD Pipelines and experience with SDLC
Solid knowledge across security domains, with strong depth in Operating Systems, Networks, Databases, and Infrastructure Architecture
Experience with Threat Modeling
Active participation in CTF competitions or Bug Bounty programs
Proficiency with security assessment tools such as Burp Suite, Nmap, Metasploit, SQLmap, Nessus, Censys, Shodan, or Frida.re — or equivalent tooling
Ability to work onsite two to three days per week
Legal authorization to work in the country where the position is located

Benefits

Comp & perks

Chance of earning equity at Nubank
Food / Meal Card (Vale-Refeição and/or Vale Alimentação)
Public Transportation Commuting Benefit (Vale-Transporte)
NuCare – Psychological, Financial and Legal Assistance Program
Life Insurance
Medical Plan
Dental Plan
NuLanguage – Language Course Program
Nucleo – Our learning platform of courses
Extended Parental Leave
Daycare Allowance
Parental Consultancy
Work-from-home Allowance
Gym Partnerships
30 days of paid vacation
Relocation Assistance Package, if applicable