Lead Security Engineer - Offensive Security - Remote

Overview

Nubank is seeking a Lead Security Engineer for their Offensive Security team to enhance security maturity through proactive threat identification and mitigation.

In Short

• Perform infrastructure, web, and mobile/API pentests.
• Craft and execute red team operations.
• Assist with vulnerability management.
• Code tools for offensive security reviews.
• Support operations to fix vulnerabilities.
• Conduct architectural/logical reviews of software.
• Collaborate with security engineers and product teams.
• Educate teams on secure development practices.
• Advocate for best practices in security.
• Enhance Nubank's security posture.

Requirements

• Experience in Offensive Security and Red Team activities.
• Knowledge of pentesting phases: reconnaissance, enumeration, exploitation, etc.
• Strong understanding of attack vectors and mitigations.
• Ability to simulate Advanced Persistent Threat behaviors.
• Familiarity with OWASP security frameworks.
• General knowledge of AWS concepts.
• Experience with CI/CD pipeline security.
• Knowledge of Operating Systems, Networks, and Databases.
• Participation in CTFs or Bug Bounty programs is a plus.
• Experience with security tools like Burp Suite, Nmap, Metasploit, etc.

Benefits

• Health, dental, and life insurance.
• Meal allowance.
• Transportation assistance.
• 30 days of paid vacation.
• Equity at Nubank.
• Discounted parking.
• Free bike parking and showers.
• Mental health and wellness assistance program.
• Language learning program.
• Gympass partnership.
• Extended maternity and paternity leave.
• Child care allowance.
• Private nursing spaces.
• Onsite health center for employees.