Grupo QuintoAndar | Sênior Security Engineer (DataSecurity)

About this role

<p><strong>About Grupo QuintoAndar</strong></p> <p>We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.</p> <p>With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.</p> <p>Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit:<a href="https://grupoquintoandar.com/pt/"> </a><a href="https://grupoquintoandar.com/pt/">https://grupoquintoandar.com/pt/</a>.</p> <p><strong>Location &amp; Remote Work&nbsp;</strong></p> <p>Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.</p> <p><strong>Hiring Process Stages</strong></p> <p>The stages of our hiring processes aim to assess your experiences and allow you to meet our teams and explore career opportunities. They are structured as follows.</p> <ul> <li>Application</li> <li>Interview with Recruiters</li> <li>Tech Screening with Engineering Team (Architecture &amp; Security Scenarios)</li> <li>Technicals Interviews (Live cases)</li> <li>Offer</li> </ul> <p><strong>About the Team</strong></p> <p>Join QuintoAndar's core Cybersecurity team to build and evolve our Data Security capabilities. This area is focused on protecting customer-sensitive data at extreme scale across our entire cloud and data ecosystem.</p> <p>As a Senior Security Engineer focusing on Data Security, you are a security architect and integrator. We don't want you just reading alerts on a dashboard, nor do we expect you to build backend applications from scratch. We want you to design the security controls, implement enterprise Data Security tools, and write the automations that ensure our data pipelines and storage environments are secure by design.</p> <p>These are the Senior Security Engineer (Data Security) responsibilities at QuintoAndar:</p> <ul> <li><strong>Data Security Architecture:</strong> Design and deploy comprehensive data protection strategies across QuintoAndar's ecosystem, including Data Lakes (Databricks), Cloud Storage (AWS S3, GCP), and corporate SaaS environments.</li> <li><strong>DSPM &amp; Sensitive Data Mapping:</strong> Lead the technical implementation and tuning of Data Security Posture Management (DSPM) tools to automatically discover, classify, and monitor sensitive data (PII/PCI) continuously.</li> <li><strong>Secure Data Engineering:</strong> Partner closely with Data Engineering and Machine Learning teams to embed security controls directly into ETLs and data pipelines (e.g., implementing data masking, anonymization, and tokenization techniques before data lands in non-prod environments).</li> <li><strong>DLP Strategy &amp; Automation:</strong> Architect and manage our Data Loss Prevention (DLP) ecosystem. Write automation scripts (using Python, APIs) to triage alerts, reduce false positives, and orchestrate incident response via SOAR platforms.</li> <li><strong>Cloud Data Posture:</strong> Enforce strict data sharing, encryption, and retention policies using Infrastructure as Code (e.g., Terraform) across our cloud platforms to prevent accidental data exposure.</li> <li><strong>Cross-Functional Enablement:</strong> Act as the technical bridge between CyberSecurity, Data Governance, Legal, and IT, translating complex privacy frameworks (LGPD, GDPR) into scalable technical controls and guardrails.</li> </ul> <p><strong>Security Level</strong></p> <p>We want to have as many talented people as possible in our team. So, although this position is described as “Senior Security Engineer”, you can apply even if you don’t consider yourself as a senior professional yet. It’s important to us to create a qualified talent poll and we will definitely reach out to you if we think you can add to our teams, no matter what seniority level you are today.</p> <p><strong>Requirements</strong></p> <p>What we are looking for:</p> <ul> <li><strong>Deep Data Security Expertise:</strong> Strong conceptual and practical understanding of data protection techniques: Data Loss Prevention (DLP), encryption (at-rest and in-transit), tokenization, hashing, and dynamic data masking.</li> <li><strong>Cloud &amp; Data Ecosystems:</strong> Practical experience securing modern data architectures (Data Lakes, Data Warehouses) and cloud-native storage in AWS or GCP (e.g., S3, RDS, BigQuery, Databricks).</li> <li><strong>Scripting &amp; Automation:</strong> Proficiency in scripting languages (like Python or Bash) to interact with APIs, build automations, and integrate security tools. You are comfortable writing Terraform or similar IaC to enforce security postures.</li> <li><strong>Analytical Problem Solving:</strong> Strong ability to threat-model complex data flows, identify exposure risks, and design pragmatic mitigation strategies without blocking business agility.</li> <li><strong>Languages:</strong> Fluency in Portuguese and advanced English - we usually use English to write documentation, reference materials, and talk to partners and co-workers from other countries.</li> </ul> <p><strong>You´ll stand out if you</strong></p> <ul> <li>Have hands-on experience implementing and scaling Data Security Posture Management (DSPM) platforms (e.g., Cyera, Wiz, Securiti.ai, BigID) in enterprise environments.</li> <li>Have a background in Data Engineering or database