{"id":28644,"url":"https://alion.io/job/nubank-senior-security-engineer-blockchain-security","title":"Senior Security Engineer (Blockchain Security)","company":{"id":13935,"name":"Nubank","domain":"nubank.com.br","url":"https://alion.io/company/nu-bank","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":100,"open_postings":9,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Web3","role_family":"Web3","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["São Paulo, Brazil","Rio de Janeiro, Brazil","Belo Horizonte, Brazil","Campinas, Brazil"],"countries":["BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":77000,"max_usd":131000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":27},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Clojure","optional":false},{"name":"OWASP","optional":false},{"name":"Smart Contracts","optional":false},{"name":"Threat Modeling","optional":false},{"name":"DeFi","optional":true},{"name":"Solidity","optional":true}],"status":"live","first_seen_at":"2026-07-17T22:01:31Z","employer_posted_date":"2026-07-17","last_verified_at":"2026-10-18T07:05:38Z","board_verified":true,"closed_at":null,"days_open":92,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":92},"description":"About Nu\nNu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.\nProprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.\nVisit ourInstitutional Page\nAbout the role\nThe Blockchain Security team sits within the Product Security & Assurance BA, part of the Information Technology and Security (ITSec) BU. Our mission is to support the security of Nu's crypto operation. In the context of Nu's global expansion, keeping these products secure, and demonstrably compliant with financial regulators, is a direct condition for our ability to operate and grow.\nAs a Senior Security Engineer on this team, you own the security posture of our crypto operation. You are the person who thinks like an attacker so our products can withstand real ones: finding vulnerabilities before adversaries do, embedding product security into how crypto products are designed and built, and making sure our controls satisfy both internal risk standards and external regulatory requirements. You won't just run security tools. You'll build and operate the ones that protect our crypto products, from hardened ingress and monitoring/alerting systems to secure secret-management and automated security-review tooling. Your work directly protects customer funds and Nu's ability to run crypto products at scale.\nYou'll be responsible for\nApplying an offensive security mindset to our crypto and blockchain products: simulating attacks, running penetration tests and security assessments, and turning findings into concrete mitigations.\n\nDriving product security across the crypto portfolio: threat modeling, security-by-design reviews, and embedding secure practices into the development lifecycle.\n\nBuilding, operating, and improving in-house security services and tooling that integrate directly with our crypto products, for example hardened ingress/edge controls, security monitoring and anomaly alerting, secure secret-management, and automated security-review tooling.\n\nEnsuring our crypto operation meets regulatory requirements: mapping controls to applicable regulations, supporting audits, and producing the evidence regulators and internal risk teams expect.\n\nCollaborating with product and engineering teams to design secure blockchain architecture and embed security-by-design into new products.\n\nContributing to security policies, standards, and guidelines that govern blockchain security operations.\n\nUsing AI to raise the leverage and quality of security work: building and running AI-assisted tooling for tasks like threat modeling, code and vulnerability review, and attack simulation, and helping the team push the frontier of what AI-first security engineering looks like.\n\nStaying current on emerging attack vectors, exploits, and best practices across product and blockchain security, and sharing that knowledge across the team.\n\nWe are looking for a person who has\nMust have\nStrong product security and/or offensive security background (penetration testing, vulnerability assessment, attack simulation, incident response).\n\nExperience embedding security into product development: threat modeling, secure SDLC, security-by-design reviews.\n\nHands-on software engineering ability: you can build and operate security services and automation, not just use off-the-shelf tools. Comfortable writing production code (we work heavily in Clojure; strong experience in any modern language plus willingness to learn Clojure is fine).\n\nSolid working knowledge of blockchain and cryptocurrency fundamentals, including how blockchains, wallets, keys, and smart contracts work, enough to reason about their security (expert-level depth not required, but real familiarity is).\n\nStrong knowledge of recent and past attack vectors and exploits, and how to remediate them.\n\nExperience with security frameworks such as OWASP and the NIST Cybersecurity Framework (CSF).\n\nFluency with AI-assisted engineering: using coding agents and LLMs in daily work, with good judgment about where they help, where they don't, and how to review their output critically.\n\nFamiliarity with AWS, and solid grounding in operating systems, networks, databases, and infrastructure architecture.\n\nAbility to work autonomously and proactively, strong analytical/problem-solving skills, and clear written and spoken English for technical and non-technical audiences.\n\nNice to have\nDeeper knowledge of blockchain/crypto internals: consensus algorithms, cryptographic protocols, smart contracts.\n\nExperience auditing smart contracts (e.g. Solidity) or working with DeFi protocols.\n\nExperience integrating with third-party crypto custody/infrastructure providers (e.g. Fireblocks, Circle, and similar).\n\nExposure to regulatory or compliance requirements in a financial or crypto context.\n\nExperience with bug bounties and/or CTFs.\n\nCertifications such as OSCP, OSWE, or Certified Blockchain Security Professional.\n\nLocation for this opportunity\nSão Paulo, Brazil\n\nCampinas, Brazil\n\nRio de Janeiro, Brazil\n\nBelo Horizonte, Brazil\n\nOur Benefits\nChance of earning equity at Nubank\n\nFood/ Meal Card (Vale-Refeição and/or Vale Alimentação)\n\nPublic Transportation Commuting Benefit (Vale-Transporte)\n\nNuCare - Psychological, Financial and Legal Assistance Program\n\nLife Insurance\n\nMedical Plan\n\nDental Plan\n\nNuLanguage - Language Course Program\n\nNucleo - Our learning platform of courses\n\nExtended Parental Leave\n\nDaycare Allowance\n\nParental Consultancy\n\nWork-from-home Allowance\n\nGym Partnerships\n\n30 days of paid vacation\n\nRelocation Assistance Package, if applicable\n\nWork Model for this Role Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/\nOur recruitment process may involve the use of artificial intelligence-enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.\nTo maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here","description_format":"text","description_chars":6536,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Equity","Hybrid work","Life insurance","Parental leave","Relocation assistance"],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Blockchain & Crypto","Cards & Card Issuing","Cryptocurrencies","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-07-17T22:01:31Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.528,"p_room":0.28,"age_days":91,"expected_fill_days":37,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/nubank-senior-security-engineer-blockchain-security","json_url":"https://alion.io/job/nubank-senior-security-engineer-blockchain-security.json","meta":{"generated_at":"2026-10-18T09:40:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14324,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13935},"rest":"https://alion.io/mcp/rest/get_company?id=13935"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnubank-senior-security-engineer-blockchain-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnubank-senior-security-engineer-blockchain-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnubank-senior-security-engineer-blockchain-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nubank-senior-security-engineer-blockchain-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnubank-senior-security-engineer-blockchain-security"}]}