freehire launches on Product Hunt on 26 August.

Follow →

Security Engineering Manager (Cloud Security)

Open 53d posting dated 3 weeks ago

Summary

Leads a senior cloud security engineering team at Nubank, defining multi-cloud security controls (AWS/GCP) and translating security strategy into execution while managing engineers and technical decisions.

About Nu

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.

Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.

Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.

Visit our Institutional Page

About the Team

Cloud Security defines and operates the cloud security controls that underpin Nubank's growth globally and across multiple cloud providers. The team owns the preventive guardrails, configuration baselines, and posture-detection mechanisms that allow Nubank to launch in new markets, sustain regulatory commitments with international banking regulators, and adopt AI safely at the cloud layer.

About the Role

We are looking for an Engineering Manager II to lead a highly senior team of software engineers, translate Foundation Security's strategy into structured execution, and provide the close technical leadership of this squad's seniority and scope demand. This is a dedicated leadership seat — your full focus is one squad and its outcomes.

What You’ll Be Responsible For

Lead the squad

  • Set clear expectations, give frequent feedback, and run career conversations with senior ICs.

  • Hire and onboard talent, partnering with P&C and the Foundation Security hiring pipeline.

  • Mediate conflicts, address low performance promptly and impartially, and create a safe space for difficult conversations.

  • Manage team engagement with data; plan the team's composition and skills against Nubank's objectives.

Drive technical decisions and engineering excellence

  • Lead and enable technical decisions on the squad's architecture, with a strong understanding of multi-cloud patterns and trade-offs (AWS, GCP, IaC, Kubernetes, event-driven controls).

  • Be accountable for the technical health of the squad's products: code quality, test coverage, observability, and technical-debt management.

  • Set the team's quality bar; oversee root cause analysis for complex incidents and lead phased rollouts that reduce blast radius.

  • Sponsor architectural decisions for squad-level projects and communicate trade-offs to non-technical stakeholders.

Translate strategy into execution

  • Cascade Foundation Security and ITSec strategy into the squad's roadmap, balancing regulatory commitments across international markets, AI enablement, and ongoing reduction of cloud configuration risk.

  • Manage small-to-moderate initiatives that span multiple stakeholders (Infrastructure peers, infrastructure teams, product engineering, compliance, GRC, procurement).

  • Own the squad's contribution to OKRs, monthly business reviews, and the Area business board.

Operate with accountability

  • Hold accountability for the squad's financials within ITSec's guidelines (tooling renewals, headcount, contracts).

  • Operate in compliance with corporate policies and risk-management processes.

  • Lead and mentor others within the squad; contribute to hiring panels across Foundation Security.


We Are Looking for a Person Who Has

Must-have

  • Engineering Manager experience leading a software/security squad, or strong tech-lead/staff-level background with clear intent and readiness to move into people management.

  • Solid hands-on software engineering background — comfortable reading and reviewing code in at least one of Golang, Clojure, or Python, writing Shell/Python scripts for automation, and reviewing IaC (Terraform, Pulumi).

  • Working knowledge of AWS at scale (multi-account, Organizations, IAM, networking, Security Hub, Config). Familiarity with GCP is a strong plus.

  • Comfort designing and governing preventive controls (SCPs, Organization Policies, admission controllers) and remediation pipelines.

  • Track record of hiring, onboarding, and developing engineers; experience (or strong appetite) for running performance and career conversations.

  • Strong written and spoken communication in English; ability to make complex trade-offs clear to non-technical stakeholders.

Nice-to-have

  • Prior experience building and shipping software products (not only operating off-the-shelf security tools) — internal platforms, services, CLIs, integrations, APIs.

  • Prior exposure to CSPM/CNAPP platforms (any major vendor).

  • Experience supporting regulatory or compliance workstreams (PCI, ISO 27001, banking regulators).

  • Familiarity with Kubernetes runtime security, event-streaming platforms, and large-scale data pipelines.

  • Experience embedding security into AI/ML infrastructure.

  • Hands-on use of AI coding assistants (Cursor, Claude Code, GitHub Copilot, or similar) to accelerate engineering work and team productivity.

Tech stack you'll be exposed to

  • AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, Golang, Clojure, Python, shell scripting, CSPM/CNAPP platforms, internal data pipelines, Looker/BigQuery, Jira. AI coding assistants are part of our daily engineering workflow.

What we offer

  • A dedicated leadership seat in a squad with very high seniority and very high strategic relevance.

  • Direct line of sight to Nubank's regulatory and international expansion programs.

  • A squad that builds its own products in-house — you'll lead software engineers shipping real software, not coordinating ticket queues.

  • A peer group of EMs across Foundation Security (Runtime, Infrastructure, Data) and a senior management layer that operates with full financial and strategic accountability.

  • Exposure to multi-country, multi-cloud problems at the scale of Latin America's largest digital bank.

Our Benefits

  • Chance of earning equity at Nubank

  • Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)

  • Public Transportation Commuting Benefit (Vale-Transporte)

  • NuCare – Psychological, Financial and Legal Assistance Program

  • Life Insurance

  • Medical Plan

  • Dental Plan

  • NuLanguage – Language Course Program

  • Nucleo - Our learning platform of courses

  • Extended Parental Leave

  • Daycare Allowance

  • Parental Consultancy

  • Work-from-home Allowance

  • Gym Partnerships

  • 30 days of paid vacation

Work Model for this Role

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.

What this application asks

ashby

Name, Email, Resume, What is your current location (city, state and country)?

  • LinkedIn Profile
  • Phone Number
  • What is your level of English proficiency? choose one
  • Have you ever led a software or security engineering team — either formally as a manager or informally as a tech lead responsible for the team's delivery and people outcomes? yes / no
  • Are you comfortable reading and reviewing production code in at least one of the following: Golang, Clojure, or Python? yes / no
  • Have you written Shell or Python scripts for automation and reviewed infrastructure-as-code — such as Terraform or Pulumi yes / no
  • Do you have hands-on experience with AWS in a multi-account or enterprise-scale environment — working with services like IAM, Organizations, or Security Hub? yes / no
  • Have you worked with cloud preventive controls such as SCPs, Organization Policies, or admission controllers — either designing, governing, or operationalizing them? yes / no
  • Have you been directly involved in hiring engineers — including running interviews, making hiring decisions, or supporting someone's career growth and performance? yes / no
  • Are you available to work onsite two to three days per week? yes / no
  • Are you legally authorized to work in the country where this position is located? yes / no
  • Will you require sponsorship for employment visa status now or in the future? yes / no
  • Do you require relocation for this role? choose one
  • Have you previously worked at Nubank or any company acquired by Nubank? yes / no
  • Have you participated in a hiring process with Nubank in the last 6 months? yes / no

See also