Grupo QuintoAndar | Security Engineer (DataSecurity)

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/.

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

The stages of our hiring processes aim to assess your experiences and allow you to meet our teams and explore career opportunities. They are structured as follows.

• Application
• Interview with Recruiters
• Tech Screening with Engineering Team (Architecture & Security Scenarios)
• Technicals Interviews (Live cases)
• Offer

Join QuintoAndar's core Cybersecurity team to build and evolve our Data Security capabilities. This area is focused on protecting customer-sensitive data at extreme scale across our entire cloud and data ecosystem.

As a Senior Security Engineer focusing on Data Security, you are a security architect and integrator. We don't want you just reading alerts on a dashboard, nor do we expect you to build backend applications from scratch. We want you to design the security controls, implement enterprise Data Security tools, and write the automations that ensure our data pipelines and storage environments are secure by design.

These are the Senior Security Engineer (Data Security) responsibilities at QuintoAndar:

• Data Security Architecture: Design and deploy comprehensive data protection strategies across QuintoAndar's ecosystem, including Data Lakes (Databricks), Cloud Storage (AWS S3, GCP), and corporate SaaS environments.
• DSPM & Sensitive Data Mapping: Lead the technical implementation and tuning of Data Security Posture Management (DSPM) tools to automatically discover, classify, and monitor sensitive data (PII/PCI) continuously.
• Secure Data Engineering: Partner closely with Data Engineering and Machine Learning teams to embed security controls directly into ETLs and data pipelines (e.g., implementing data masking, anonymization, and tokenization techniques before data lands in non-prod environments).
• DLP Strategy & Automation: Architect and manage our Data Loss Prevention (DLP) ecosystem. Write automation scripts (using Python, APIs) to triage alerts, reduce false positives, and orchestrate incident response via SOAR platforms.
• Cloud Data Posture: Enforce strict data sharing, encryption, and retention policies using Infrastructure as Code (e.g., Terraform) across our cloud platforms to prevent accidental data exposure.
• Cross-Functional Enablement: Act as the technical bridge between CyberSecurity, Data Governance, Legal, and IT, translating complex privacy frameworks (LGPD, GDPR) into scalable technical controls and guardrails.

We want to have as many talented people as possible in our team. So, although this position is described as “Senior Security Engineer”, you can apply even if you don’t consider yourself as a senior professional yet. It’s important to us to create a qualified talent poll and we will definitely reach out to you if we think you can add to our teams, no matter what seniority level you are today.

What we are looking for:

• Deep Data Security Expertise: Strong conceptual and practical understanding of data protection techniques: Data Loss Prevention (DLP), encryption (at-rest and in-transit), tokenization, hashing, and dynamic data masking.
• Cloud & Data Ecosystems: Practical experience securing modern data architectures (Data Lakes, Data Warehouses) and cloud-native storage in AWS or GCP (e.g., S3, RDS, BigQuery, Databricks).
• Scripting & Automation: Proficiency in scripting languages (like Python or Bash) to interact with APIs, build automations, and integrate security tools. You are comfortable writing Terraform or similar IaC to enforce security postures.
• Analytical Problem Solving: Strong ability to threat-model complex data flows, identify exposure risks, and design pragmatic mitigation strategies without blocking business agility.
• Languages: Fluency in Portuguese and advanced English - we usually use English to write documentation, reference materials, and talk to partners and co-workers from other countries.

• Have hands-on experience implementing and scaling Data Security Posture Management (DSPM) platforms (e.g., Cyera, Wiz, Securiti.ai, BigID) in enterprise environments.
• Have a background in Data Engineering or database administration, giving you a deep understanding of how complex data pipelines (Airflow, Spark, Kafka) operate from the inside out.
• Possess deep knowledge of applied cryptography and enterprise key management systems (e.g., AWS KMS, HashiCorp Vault).
• Have practical experience using AI tools or LLMs to speed up data classification, reduce false positives in DLP, or automate security engineering tasks.

• Our hiring process starts with the application! If you truly want to be part of our team, please complete this step of the process. We analyze all candidates individually and provide feedback to all applicants.
• All communication will be conducted via email, so please stay tuned for our messages and release the domain @quintoandar.com.br to ensure our emails are not sent to spam.

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!

You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates. For questions or to exercise your rights as a data subject, please contact us through our Service Channel.