[InfoSec] Security Incident Responder

About Nubank

Nubank is one of the world's largest digital financial services platforms, with around 80 million customers in Brazil, Mexico, and Colombia. As one of the world's leading technology companies, Nubank leverages its technology and innovation to create new financial solutions for individuals and SMEs that are simple, intuitive, convenient, low-cost and human. Guided by its mission to fight complexity and empower people, Nubank is advancing access to financial services in Latin America, connecting profit and purpose to create value and positively impact the communities in which it operates. For more information, visit https://international.nubank.com.br/careers/

About the team

The Nubank Security Operations team actively seeks out potential security threats to protect both our customers and Nubankers. We respond swiftly to security incidents, conduct thorough investigations, and implement measures to mitigate risks. Our strong engineering capabilities allow us to reduce response times through automation and specialized micro-services.

Our Incident Response Team is focused on managing incidents and is constantly enhancing its skills and maturity. Additionally, the Nubank CSIRT is a proud member of the FIRST (Forum of Incident Response and Security Teams) community. For more information, see our FIRST membership details here.

You can find more about Nubank Infosec here: https://blog.nubank.com.br/infosec-nubank-protecao-dados/

You will be responsible for

Nubank is experiencing hyper-growth in several dimensions: number of customers, products, international markets, and employees. We are seeking an Incident Responder Specialist who, together with the team, can relentlessly lead Security Operations pursuing and eradicating threats across complex environments. As an Incident Responder Specialist, you will be able to build and scale a healthy security operation team to tackle challenges from anomaly detection to incident response. Furthermore, you will be able to work to protect the applications powering one of the most sophisticated digital banking platforms ever built, and building solutions that enable faster and more effective security operation.

• Investigate complex cases to understand the mechanisms of abuse and guide strategies to mitigate or detect the anomaly;
• Provide technical leadership and inspire the team to achieve high performance;
• Define and manage metrics that are used to make strategic decisions and evaluate the efficacy;
• Ensuring clear visibility into security operations;
• Alignment with stakeholders around the team’s vision, goals, and metrics;
• Analyze and interpret large datasets to enhance investigations, quantify trends, and support conclusions.

We are looking for a person who

Must-Have

• Passionate about incident response, with an innovative mindset and willingness to challenge the status quo;
• 4+ years of experience as an Incident Response Analyst, specializing in investigation and mitigation within complex environments;
• Experienced in leading major incident crises involving multiple stakeholders;
• Strong teamwork and communication skills, both verbal and written, with the ability to effectively tailor messages for executive, technical, and non-technical audiences; 
• Proficient in both understanding and speaking English;
• Understanding of security vulnerabilities, attacker exploit techniques, and their remediation methodologies;
• Ability to deal with multiple stack technologies including cloud environments;
• Proficient in log analysis and conducting detailed, evidence-based investigations;
• Fundamental skills in automation using SOAR, Python, and other programming languages.

Nice to Have

• Knowledge in frameworks such as SIM3, FIRST Services Framework, Mitre ATT&CK, or NIST CSF;
• CERT.BR (Carnegie Mellon - Incident Handler) or equivalent certifications in incident handling. 
• Experience leading agile teams, being familiar with the most relevant ceremonies, metrics, and processes;
• Participate in or lead Global Security operations with follow the sun approach.
• Experience working with a team spanning multiple locations/time zones;
• Experience in cloud environments, including incident response and management in cloud-based infrastructures..

Benefits

• Chance of earning equity at Nubank
• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
• Public Transportation Commuting Benefit (Vale-Transporte)
• NuCare – Psychological, Financial and Legal Assistance Program
• Life Insurance
• Medical Plan
• Dental Plan
• NuLanguage – Language Course Program
• Nucleo - Our learning platform of courses
• Extended Parental Leave
• Daycare Allowance
• Parental Consultancy
• Work-from-home Allowance
• Gym Partnerships
• 30 days of paid vacation

Diversity & Inclusion

At Nu, we want to ensure that we are building a diverse and inclusive workplace that reflects the customers we serve and seek to empower. That's why we hire based on equality. We consider gender, ethnicity, race, religion, sexual orientation, and other identity markers as key elements for our company, ensuring that none of them pose a barrier to recruiting talented individuals.