高级安全工程师（区块链安全）
Senior Security Engineer (Blockchain Security)
关于Nu
Nu是拉丁美洲领先的数字银行，为巴西、墨西哥和哥伦比亚的1.4亿客户提供服务。该公司通过利用数据和专有技术开发创新产品和服务，引领行业变革。
秉承着对抗复杂性并赋能人们的使命，Nu为客户提供完整的金融旅程，通过负责任的贷款和透明度促进金融准入和进步。公司由一个高效且可扩展的商业模式驱动，结合低成本的服务与不断增长的回报。
Nu的影响已获得多项奖项的认可，包括《时代》100家最具影响力公司、《快公司》最具创新力公司以及福布斯全球最佳银行。
访问我们的机构页面 https://www.nu.com/2026-en
关于职位
区块链安全团队隶属于产品安全与保障业务单元（BA），该单元属于信息技术与安全（ITSec）业务单元。我们的使命是支持Nu的加密货币运营的安全性。在Nu全球扩张的背景下，确保这些产品安全，并且明显符合金融监管机构的要求，是我们能够运营和发展的直接条件。
作为该团队的高级安全工程师，你将负责我们加密货币运营的安全态势。你是那种以攻击者思维思考的人，使我们的产品能抵御真实的攻击：在对手之前发现漏洞，将产品安全嵌入到加密货币产品的设计和构建过程中，并确保我们的控制措施既符合内部风险标准，也符合外部监管要求。你不仅仅是运行安全工具，而是构建和运营保护我们加密货币产品的工具，从强化的入口和监控/警报系统到安全的密钥管理以及自动化安全审查工具。你的工作直接保护客户资金和Nu大规模运营加密货币产品的能力。
你将负责
- 将进攻性安全思维应用于我们的加密货币和区块链产品：模拟攻击，进行渗透测试和安全评估，并将发现转化为具体的缓解措施。
- 推动整个加密货币产品组合的安全性：威胁建模、安全设计评审，并将安全实践嵌入开发流程。
- 构建、运营和改进直接集成到我们加密货币产品中的内部安全服务和工具，例如
查看英文原文
ABOUT NU
Nu is the leading digital bank in Latin America, serving 140 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.
Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.
Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.
Visit our Institutional Page https://www.nu.com/2026-en
ABOUT THE ROLE
The Blockchain Security team sits within the Product Security & Assurance BA, part of the Information Technology and Security (ITSec) BU. Our mission is to support the security of Nu's crypto operation. In the context of Nu's global expansion, keeping these products secure, and demonstrably compliant with financial regulators, is a direct condition for our ability to operate and grow.
As a Senior Security Engineer on this team, you own the security posture of our crypto operation. You are the person who thinks like an attacker so our products can withstand real ones: finding vulnerabilities before adversaries do, embedding product security into how crypto products are designed and built, and making sure our controls satisfy both internal risk standards and external regulatory requirements. You won't just run security tools. You'll build and operate the ones that protect our crypto products, from hardened ingress and monitoring/alerting systems to secure secret-management and automated security-review tooling. Your work directly protects customer funds and Nu's ability to run crypto products at scale.
YOU'LL BE RESPONSIBLE FOR
- Applying an offensive security mindset to our crypto and blockchain products: simulating attacks, running penetration tests and security assessments, and turning findings into concrete mitigations.
- Driving product security across the crypto portfolio: threat modeling, security-by-design reviews, and embedding secure practices into the development lifecycle.
- Building, operating, and improving in-house security services and tooling that integrate directly with our crypto products, for example hardened ingress/edge controls, security monitoring and anomaly alerting, secure secret-management, and automated security-review tooling.
- Ensuring our crypto operation meets regulatory requirements: mapping controls to applicable regulations, supporting audits, and producing the evidence regulators and internal risk teams expect.
- Collaborating with product and engineering teams to design secure blockchain architecture and embed security-by-design into new products.
- Contributing to security policies, standards, and guidelines that govern blockchain security operations.
- Using AI to raise the leverage and quality of security work: building and running AI-assisted tooling for tasks like threat modeling, code and vulnerability review, and attack simulation, and helping the team push the frontier of what AI-first security engineering looks like.
- Staying current on emerging attack vectors, exploits, and best practices across product and blockchain security, and sharing that knowledge across the team.
WE ARE LOOKING FOR A PERSON WHO HAS
Must have
- Strong product security and/or offensive security background (penetration testing, vulnerability assessment, attack simulation, incident response).
- Experience embedding security into product development: threat modeling, secure SDLC, security-by-design reviews.
- Hands-on software engineering ability: you can build and operate security services and automation, not just use off-the-shelf tools. Comfortable writing production code (we work heavily in Clojure; strong experience in any modern language plus willingness to learn Clojure is fine).
- Solid working knowledge of blockchain and cryptocurrency fundamentals, including how blockchains, wallets, keys, and smart contracts work, enough to reason about their security (expert-level depth not required, but real familiarity is).
- Strong knowledge of recent and past attack vectors and exploits, and how to remediate them.
- Experience with security frameworks such as OWASP and the NIST Cybersecurity Framework (CSF).
- Fluency with AI-assisted engineering: using coding agents and LLMs in daily work, with good judgment about where they help, where they don't, and how to review their output critically.
- Familiarity with AWS, and solid grounding in operating systems, networks, databases, and infrastructure architecture.
- Ability to work autonomously and proactively, strong analytical/problem-solving skills, and clear written and spoken English for technical and non-technical audiences.
Nice to have
- Deeper knowledge of blockchain/crypto internals: consensus algorithms, cryptographic protocols, smart contracts.
- Experience auditing smart contracts (e.g. Solidity) or working with DeFi protocols.
- Experience integrating with third-party crypto custody/infrastructure providers (e.g. Fireblocks, Circle, and similar).
- Exposure to regulatory or compliance requirements in a financial or crypto context.
- Experience with bug bounties and/or CTFs.
- Certifications such as OSCP, OSWE, or Certified Blockchain Security Professional.
Location for this opportunity
- São Paulo, Brazil
- Campinas, Brazil
- Rio de Janeiro, Brazil
- Belo Horizonte, Brazil
OUR BENEFITS
- Chance of earning equity at Nubank
- Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
- Public Transportation Commuting Benefit (Vale-Transporte)
- NuCare – Psychological, Financial and Legal Assistance Program
- Life Insurance
- Medical Plan
- Dental Plan
- NuLanguage – Language Course Program
- Nucleo - Our learning platform of courses
- Extended Parental Leave
- Daycare Allowance
- Parental Consultancy
- Work-from-home Allowance
- Gym Partnerships
- 30 days of paid vacation
- Relocation Assistance Package, if applicable
WORK MODEL FOR THIS ROLE
OUR HYBRID WORK MODEL BRINGS US TO THE OFFICE AT LEAST TWICE A WEEK, ON STRATEGIC DAYS DESIGNED TO MAXIMIZE TEAM CONNECTION AND COLLABORATION. FOR MORE DETAILS, VISIT HTTPS://BUILDING.NUBANK.COM/NU-HYBRID-WORK-MODEL/
Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.