威胁检测负责人
Lead Security Engineer (Threat Detection)
关于Nu
Nu是拉丁美洲领先的数字银行，为巴西、墨西哥和哥伦比亚的1.4亿客户提供服务。该公司通过利用数据和专有技术开发创新产品和服务，引领行业变革。
以对抗复杂性并赋能人们为使命，Nu为客户提供完整的金融旅程，通过负责任的贷款和透明度促进金融准入和进步。公司由一个高效且可扩展的商业模式驱动，结合低成本服务与不断增长的回报。
Nu的影响已获得多项奖项的认可，包括《时代》100家最具影响力公司、《快公司》最具创新力公司以及《福布斯》世界最佳银行。
访问我们的机构页面 https://www.nu.com/2026-en
关于该职位
你将领导一支位于对手和1.35亿客户之间的团队。威胁检测团队主动寻找安全威胁，并构建强大且可操作的检测机制，以保护客户和Nubank员工——作为真正的安全运营中心运作，依托强大的工程能力和来自内部威胁情报团队的情报。
作为负责人，你将全程负责战略威胁检测计划：情报收集、威胁建模、检测工程、AI辅助分析、紫队验证、事件响应和事后学习。你的目标是确保有效的检测规则、可操作的洞察和AI驱动的安全能力到位，并符合行业最佳实践，以便在威胁到达客户之前识别、阻止和检测到Nubank环境中的对手活动。
你还将组建和领导一支高绩效团队，支持安全领导层打造世界级的安全组织，并确保检测流程满足审计要求，并支持与监管机构的清晰沟通。
了解更多关于Nubank信息安全的信息：https://blog.nubank.com.br/infosec-nubank-protecao-dados/ https://blog.nubank.com.br/infosec-nubank-protecao-dados/
你将负责
- 分析网络威胁情报、新兴攻击趋势和安全遥测数据，以开发稳健的检测机制和威胁模型，同时减少误报并提高安全运营的效率。
- 在检测生命周期中利用AI和机器学习——异常检测、行为分析、警报分类
查看英文原文
ABOUT NU
Nu is the leading digital bank in Latin America, serving 140 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.
Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.
Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.
Visit our Institutional Page https://www.nu.com/2026-en
ABOUT THE ROLE
You will lead the team that stands between adversaries and 135 million customers. The Threat Detection team proactively hunts for security threats and builds robust, actionable detections to protect both customers and Nubankers — operating as a true Security Operations Center, backed by strong engineering power and intelligence from our internal Threat Intelligence team.
As Lead, you own the strategic Threat Detection program end to end: intelligence gathering, threat modeling, detection engineering, AI-assisted analysis, Purple Team validation, incident response and post-incident learning. Your goal is to make sure effective detection rules, actionable insights and AI-enabled security capabilities are in place and aligned with industry best practices, so that adversary activity across Nubank's environment is identified, prevented and detected before it reaches our customers.
You'll also build and lead a high-performing team, support Security leadership in building a world-class security organization, and ensure detection processes meet auditing requirements and support clear communication with regulatory bodies.
Learn more about Nubank Infosec: https://blog.nubank.com.br/infosec-nubank-protecao-dados/ https://blog.nubank.com.br/infosec-nubank-protecao-dados/
YOU'LL BE RESPONSIBLE FOR
- Analyzing cyber threat intelligence, emerging attack trends and security telemetry to develop robust detections and threat models, while reducing false positives and improving the efficiency of security operations.
- Leveraging AI and machine learning across the detection lifecycle — anomaly detection, behavioral analytics, alert triage, threat intelligence enrichment, investigation prioritization and response automation — and leading their adoption so these capabilities are reliable, measurable and secure.
- Defining validation, quality, explainability and security controls for AI-assisted capabilities, accounting for risks such as inaccurate outputs, data leakage, prompt injection, model manipulation and adversarial evasion.
- Leading Purple Team activities with Offensive Security, Threat Intelligence, Incident Response and Engineering: translating adversary behaviors into realistic attack simulations, adversary emulation plans and detection validation scenarios mapped to frameworks such as MITRE ATT&CK.
- Identifying detection and prevention gaps, validating security controls, measuring detection coverage and driving remediation through actionable improvement plans.
- Establishing feedback loops between offensive and defensive teams so lessons from simulations and real incidents continuously improve detection, investigation and response.
- Defining success criteria and tracking metrics: detection coverage, validation success rate, false-positive reduction, investigation time, response efficiency and remediation cycle time.
- Building and leading the team — mentoring engineers and fostering a culture of ownership, accountability, collaboration and continuous learning.
- Partnering closely with Security Engineering, Threat Intelligence, Software Engineering and Incident Response to build scalable solutions for analyzing security event data and a resilient security architecture aligned with Business Unit strategy.
WE ARE LOOKING FOR A PERSON WHO HAS
- Solid hands-on experience with Threat Hunting and Incident Response, including handling and resolving complex security incidents.
- Experience as a technical leader in the identification, analysis and response to complex security threats, providing mentorship and guidance to team members.
- Experience developing and maintaining detection-as-code solutions to automate threat identification and response.
- Proven experience in information security operations, with expertise in managing, analyzing and deriving insights from logs and other security-related data.
- Proficiency with SIEM and EDR tools, and with security platforms such as WAFs, firewalls (e.g. Palo Alto, Cisco ASA) and IDS/IPS.
- Experience using and integrating threat intelligence feeds to improve detection.
- Proficiency in SQL for querying and managing security-related databases.
- Knowledge of cloud security principles and experience securing cloud environments across providers (e.g. AWS).
- Track record of developing processes, measuring results and delivering continuous improvement.
- Strong communication skills, a genuine team player and team leader, able to thrive in a team where diversity is key to high performance.
- Advanced English.
Location for this opportunity (City, Country)
- São Paulo, Brazil
- Campinas, Brazil
- Rio de Janeiro, Brazil
- Belo Horizonte, Brazil
OUR BENEFITS
- Chance of earning equity at Nubank
- Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
- Public Transportation Commuting Benefit (Vale-Transporte)
- NuCare – Psychological, Financial and Legal Assistance Program
- Life Insurance
- Medical Plan
- Dental Plan
- NuLanguage – Language Course Program
- Nucleo - Our learning platform of courses
- Extended Parental Leave
- Daycare Allowance
- Parental Consultancy
- Work-from-home Allowance
- Gym Partnerships
- 30 days of paid vacation
- Relocation Assistance Package, if applicable
WORK MODEL FOR THIS ROLE
- Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/
Explore how we build technology at Nubank:
🔗 https://building.nubank.com.br/building.nubank.com.br http://building.nubank.com.br ↗
🎥 https://www.youtube.com/@building.nubankyoutube.com/@building.nubank http://youtube.com/@building.nubank ↗
🎧 Listen to our stories on Spotify https://open.spotify.com/show/4hAJnAkYKXl42hLXa4LmVQ ↗
Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.