Senior Security Engineer - Application Security- BR - 2026

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The Application Security team focuses on proactive hunting for and mitigating potential security threats on Nubank. This role is ideal for someone with a strong foundation in application security concepts, who enjoys working closely with engineering teams to drive security best practices, and who has a keen interest in emerging areas such as AI security and threat modeling.

Responsibilities

Embed security practices into the SDLC across backend, mobile, and web applications; Deploy and maintain security tools (SAST, DAST, SCA, MAST) in CI/CD pipelines; Perform threat modeling and security reviews for new and existing projects; Develop scripts and tools (Python, Go, Bash) to automate security checks and processes; Collaborate with engineering teams to explain and remediate vulnerabilities; Support AI-related security initiatives, ensuring safe adoption of ML/AI features in products; Contribute to the evolution of internal security guidelines and baselines; Participate in cross-functional discussions to align security requirements with business goals

Requirements

Solid understanding of application security concepts and secure software development practices; Hands-on experience with CI/CD pipelines and implementing security tools (e.g., SAST, DAST, SCA); Knowledge of scripting/programming with commonly used languages like Python, Go, bash, etc for automation and tooling; Familiarity with container security tools (e.g., Trivy, Aqua); Experience working with modern software architectures: Web, Mobile, APIs, and MCPs; Strong communication and collaboration skills to work with multi-disciplinary teams

Nice to have

Previous experience conducting security assessments in distributed systems environments; Experience with tools like Semgrep, Fortify, Checkmarx, Veracode; Experience with pipeline tools like Github Actions, Gitlab Workflow, others; Experience with AI security concepts and emerging AI/ML security risks; Familiarity with threat modeling methodologies (e.g., STRIDE, PASTA, OWASP Threat Dragon); Knowledge of regulatory and compliance requirements relevant to financial services

Benefits

Chance of earning equity at Nubank; Food/ Meal Card (Vale-Refeição and/or Vale Alimentação); Public Transportation Commuting Benefit (Vale-Transporte); NuCare – Psychological, Financial and Legal Assistance Program; Life Insurance; Medical Plan; Dental Plan; NuLanguage – Language Course Program; Nucleo - Our learning platform of courses; Extended Parental Leave; Daycare Allowance; Parental Consultancy; Work-from-home Allowance; Gym Partnerships; 30 days of paid vacation; Relocation Assistance Package, if applicable