Senior Security Engineer - Application Security
NubankDigital Banking company
São Paulo, BrazilSenior
Sequoia Capital
DST Global
Founders Fund
Citi
Goldman Sachs
Elizabeth Martinez de Marcano
Software Engineering
About the role
TL;DR
Enable secure software development practices by embedding security into the SDLC.
- •As a Security Engineer in the Application Security (AppSec) team, you will enable secure software development practices across Nubank's engineering organization.
- •You will work with diverse technology stacks and help developers ship secure code without friction.
- •Key Responsibilities Embed security practices into the SDLC across backend, mobile, and web applications.
- •Deploy and maintain security tools (SAST, DAST, SCA, MAST) in CI/CD pipelines.
- •Perform threat modeling and security reviews for new and existing projects.
- •Collaborate with engineering teams to explain and remediate vulnerabilities.
- •Support AI-related security initiatives, ensuring safe adoption of ML/AI features in products.
- •Requirements Solid understanding of application security concepts and secure software development practices.
- •Hands-on experience with CI/CD pipelines and implementing security tools (e.g., SAST, DAST, SCA).
- •Knowledge of scripting/programming with commonly used languages like Python, Go, bash, etc for automation and tooling.
- •Familiarity with container security tools (e.g., Trivy, Aqua).
- •Strong communication and collaboration skills to work with multi-disciplinary teams.
Required skills
PythonGoBashCI/CDOWASP
Nice-to-have skills
GitHub ActionsGitLab CI
Domain expertise
fintech
Benefits & perks
Equity, Food/ Meal Card, Public Transportation Commuting Benefit, Psychological, Financial and Legal Assistance Program, Life Insurance, Medical Plan, Dental Plan, Language Course Program, Learning platform of courses, Extended Parental Leave, Daycare Allowance, Parental Consultancy, Work-from-home Allowance, Gym Partnerships, 30 days of paid vacation, Relocation Assistance Package
Tech stack
ClojurePythonGoKotlinSwiftDartCI/CDBashOWASP