Senior Security Engineer - Incident Response

About Us

Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.

Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/

About the role

Your mission is to be the frontline protector for millions of customers and Nubankers. At Nubank, Information Security isn’t just a support function; it’s the bedrock of our trust. As an Incident Responder Analyst, you will be the technical "maestro" during critical moments, ensuring complex threats are neutralized with speed and precision. Your goal is to elevate our incident response maturity by leveraging engineering and automation, ensuring our defense scales as fast as the "purple revolution" itself.

You'll be responsible for

• Incident Command: Acting as the technical Incident Commander during major crises, coordinating technical workstreams and providing clear, data-driven updates to global stakeholders.

• Complex Investigations: Diving deep into sophisticated abuse cases to understand their mechanisms, guiding strategies to mitigate current anomalies and prevent future ones.

• Engineering & Automation: Driving the creation and refinement of SOAR playbooks and Python-based tools to automate repetitive tasks and ensure the operation scales efficiently.

• Data Interpretation: Analyzing large datasets to identify emerging threat trends, supporting long-term detection improvements and quantifying business risk.

We are looking for a person who has

• Proven IR Experience: 4+ years of hands-on experience as an Incident Response Analyst or Specialist, with a track record of handling investigations in complex, high-scale environments.

• Cloud IR Mastery: Direct experience managing and responding to incidents within modern cloud infrastructures (AWS, GCP, or Azure).

• Automation Engineering mindset: Strong skills in Python and SOAR platforms to build self-healing workflows and automated response scripts.

• Technical Authority: A deep understanding of security vulnerabilities, attacker TTPs (Mitre ATT&CK), and modern remediation methodologies.

• Strategic Communication: The ability to translate complex technical findings into clear, actionable reports for both technical peers and executive leadership.

• English Proficiency: Proficient in both understanding and speaking English for seamless collaboration within our global team and the FIRST community.

Location for this opportunity (City, Country)

• São Paulo, Brazil

• Campinas, Brazil

• Rio de Janeiro, Brazil

• Belo Horizonte, Brazil

Our Benefits

• Chance of earning equity at Nubank

• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)

• Public Transportation Commuting Benefit (Vale-Transporte)

• NuCare – Psychological, Financial and Legal Assistance Program

• Life Insurance

• Medical Plan

• Dental Plan

• NuLanguage – Language Course Program

• Nucleo - Our learning platform of courses

• Extended Parental Leave

• Daycare Allowance

• Parental Consultancy

• Work-from-home Allowance

• Gym Partnerships

• 30 days of paid vacation

• Relocation Assistance Package, if applicable

Work Model for this Role

• Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/