2 months ago
Responsibilities
- Conduct penetration tests, security assessments, attack simulations, and vulnerability remediation for crypto and blockchain products.
- Drive threat modeling, security-by-design reviews, and secure development practices across the crypto product portfolio.
- Build, operate, and improve security services and automation, including hardened ingress controls, monitoring and alerting, secret management, and automated security-review tooling.
- Map security controls to applicable regulations, support audits, and produce evidence for regulators and internal risk teams.
- Collaborate with product and engineering teams on secure blockchain architecture and contribute to security policies, standards, and guidelines.
- Build and operate AI-assisted tooling for threat modeling, code and vulnerability review, and attack simulation.
- Track emerging blockchain and product-security attack vectors, exploits, and best practices, and share knowledge with the team.
Requirements
- Strong product security and/or offensive security experience, including penetration testing, vulnerability assessment, attack simulation, or incident response.
- Experience embedding security into product development through threat modeling, secure SDLC practices, and security-by-design reviews.
- Hands-on ability to write and operate production security services and automation; strong experience in a modern programming language and willingness to learn Clojure.
- Working knowledge of blockchain and cryptocurrency fundamentals, including blockchains, wallets, keys, and smart contracts.
- Strong knowledge of attack vectors, exploits, and remediation practices.
- Experience with security frameworks such as OWASP and the NIST Cybersecurity Framework.
- Experience using coding agents and large language models in security engineering with the judgment to critically review their output.
- Familiarity with AWS and solid grounding in operating systems, networks, databases, and infrastructure architecture.
- Clear written and spoken English, analytical and problem-solving ability, and the capacity to work autonomously.
- Preferred qualifications include deeper blockchain and cryptographic knowledge, Solidity or smart-contract auditing, DeFi experience, crypto custody integrations, financial or crypto regulatory exposure, bug bounties or CTFs, and certifications such as OSCP, OSWE, or Certified Blockchain Security Professional.
Benefits
- Equity opportunity, meal and food card, public transportation benefit, life insurance, medical and dental plans, and psychological, financial, and legal assistance.
- Language courses, learning platform access, extended parental leave, daycare allowance, parental consultancy, gym partnerships, 30 days of paid vacation, and relocation assistance where applicable.
- Hybrid work model requiring attendance at the office at least twice per week.
- Locations are available in São Paulo, Campinas, Rio de Janeiro, and Belo Horizonte, Brazil.
About Nubank
Nu is one of the largest digital financial services platforms in the world, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services. Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns. https://www.youtube.com/watch?v=kwwzcXK2PUo