Lead Security Engineer - Vulnerability Management

The role

You will act as a technical leader within Vulnerability Management to evolve scalable, risk-driven programs. You will lead initiatives to improve the vulnerability lifecycle, design automated workflows, and partner with various engineering and security teams.

What you will do

• Lead initiatives to improve the end-to-end vulnerability management lifecycle.
• Design and evolve scalable processes, controls, workflows and automations.
• Drive improvements across vulnerability identification sources.
• Partner with Engineering, AppSec, Cloud Security, Offensive Security, Risks and other stakeholders.
• Provide technical guidance on complex vulnerabilities.
• Lead root-cause analysis for recurring findings and workflow failures.
• Define and improve metrics, dashboards and reporting.
• Support regulatory, audit and compliance activities.
• Contribute to the evolution of VM architecture, tooling and integrations.
• Mentor engineers and participate in hiring.

Required qualifications

• Significant experience in information security, security engineering, vulnerability management, application security, cloud security or a related discipline.
• Deep understanding of vulnerability management principles, including risk-based prioritization, remediation processes, verification and SLAs.
• Experience designing or operating security controls and processes at scale.
• Experience integrating security tools, scanners, ticketing systems, asset inventories and reporting platforms.
• Strong technical understanding of cloud infrastructure, application security, source code security, container security, network security, operating systems, CI/CD, APIs and automation.
• Ability to investigate complex findings, identify root causes and translate technical analysis into clear remediation guidance.
• Proven experience leading complex, ambiguous, cross-functional initiatives with multiple stakeholders.
• Strong communication skills to influence engineers, technical leaders, risk teams and senior stakeholders.
• Professional fluency in English.

Nice to have

• Experience working in regulated environments or supporting audits and compliance programs.
• Experience developing scripts, automations or integrations using a programming or scripting language.
• Continuous Threat Exposure Management (CTEM) knowledge.

Benefits

• Chance of earning equity at Nubank
• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
• Public Transportation Commuting Benefit (Vale-Transporte)
• NuCare – Psychological, Financial and Legal Assistance Program
• Life Insurance
• Medical Plan
• Dental Plan
• NuLanguage – Language Course Program
• Nucleo - Our learning platform of courses
• Extended Parental Leave
• Daycare Allowance
• Parental Consultancy

Before you apply

• Recruitment process may involve the use of artificial intelligence–enabled tools.
• Nu does not provide individualized technical feedback.

About the company

Nu serves more than 140 million customers with a mission to fight complexity and empower people. The company uses proprietary technology and data at scale to power its digital platform.