Security Engineer - Cyber Threat Intelligence (CTI)

About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/.

Location & Remote Work

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

About the Position

The Cyber Threat Intelligence Senior Engineer will be the primary technical owner of the Threat Intelligence area, ensuring compliance with the program’s strategy, doctrine, and operational standards. The main focus is the production of actionable intelligence, management of the full CTI lifecycle, and leadership of advanced collection efforts, with emphasis on the threat and fraud landscape in Brazil and Latin America. The professional will act as the CTI focal point for the entire organization, raising the technical level of the Cyber team and building a robust, automated architecture to support the program.

Key Responsibilities

• Doctrine and Technical Leadership: Develop, implement, and maintain the organization’s Cyber Threat Intel doctrine, ensuring the consistency, effectiveness, and maturity of the program.
• Knowledge Base: Build and consolidate a structured, scalable CTI knowledge base, centralizing information on relevant threat actors, TTPs, campaigns, and IoCs.
• CTI Engineering Architecture & Automation: Design and implement robust architectures to connect intelligence sources to Data Lakes and the Security tooling ecosystem. Use automation/orchestration tools (SOAR, data pipelines, and API integrations) to ensure the delivery of actionable intelligence, enabling correlation, dynamic enrichment, and agility in data consumption.
• Comprehensive Intelligence Production: Lead the production of actionable reports, alerts, and briefings at the Strategic, Tactical, and Operational levels for audiences ranging from security analysts to senior executives.
• CTI Lifecycle Management: Demonstrate technical mastery and lead the management of all phases of the intelligence cycle (Direction, Collection, Processing, Analysis, and Dissemination), supporting and guiding other team members in the day-to-day operational demands of the SOC.
• Detection Engineering & Threat Hunting: Master the discipline of Threat Hunting. Understand complex threat scenarios, map key adversaries, and translate actionable intelligence into effective detection rules and hardening recommendations for security controls.
• Advanced Collection and OPSEC: Lead specialized collection efforts using advanced OSINT techniques, maintaining a rigorous OPSEC standard in interactions and collections in closed/restricted forums and channels.
• Brand Protection: Develop and continuously improve the Brand Protection practice, combating phishing, digital fraud, and brand misuse together with strategic partners and internal teams.
• Vendor Management and Feed Integration: Manage relationships, technical evaluation, procurement, and integration of CTI feeds, optimizing the quality of the information received.
• Regional Focus and Anti-Fraud: Maintain continuous specialization in the cybercrime and fraud landscape in Brazil and Latin America, translating regional insights into actionable intelligence and tactical deliverables targeted at the company’s assets.

Qualifications and Required Skills

• Professional Experience: Minimum of 5 years of proven experience in Cyber Threat Intelligence roles, Security Engineering with a focus on Intelligence, Malware Analysis, or Security Research.
• CTI Architecture and Automation: Hands-on experience building intelligence pipelines, automating processes via APIs/scripts (Python, Go, etc.), and integrating CTI tools with Data Lakes, SIEM, SOAR, and EDR.
• Frameworks and Doctrine: Strong practical knowledge in applying established threat intelligence frameworks (e.g., MITRE ATT&CK, Diamond Model, Cyber Kill Chain, STIX/TAXII).
• Analysis and Correlation: Proficiency in critical analysis of threat data, correlation of events from multiple data sources, and contextualization of corporate risks.
• Communication: Excellent written and verbal communication skills in Portuguese and English (Spanish is a plus), with the ability to synthesize complex technical concepts for executive and operational audiences.

We Offer

• Competitive salary
• Profit sharing
• Meal allowance
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions
• Reading kit for children – PlayKids

Diversity & Inclusion at Grupo QuintoAndar

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!

You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

Privacy and Data Protection

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates. For questions or to exercise your rights as a data subject, please contact us through our Service Channel.

Apply for this job

indicates a required field

First Name

Last Name

Email

Country

Phone

Location (City)

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

---

Education

School

Select...

---

Do you have any disability/neurodiversity?

Select...

What is your type of disability?

Select...

If you answered yes to the question about PwD, please attach your updated medical report here.

Accepted file types: pdf, doc, docx, txt, rtf

To ensure a fair and accessible selection process, would you like to request any accessibility accommodations?

Select...

What is your nationality?

Select...

Do you have authorization to live and work in your country?

Select...

If yes, what is the validity? (If you are not a foreigner, put N/A)

What's your English proficiency level?

Select...

Please select the option that best describes your ability:

What's your Spanish proficiency level?

Select...

Please select the option that best describes your ability:

What is your salary expectation for this position?

LinkedIn

GitHub

Please share the pronouns you use

Select...

---

[EN] Demographic Questionnaire

Why do we ask for this information?

At Grupo QuintoAndar, we believe that diversity is the key to building an innovative and inclusive work environment.

To help us with this, we ask you to share some information about yourself. It is important for you to know that your data is completely anonymous to recruiters and anyone reviewing your resume. We use this information in an aggregated form - meaning without identifying you personally - to better understand who is participating in our selection processes and, thus, ensure that we are being more equitable and inclusive for everyone, right from the first contact.

By filling out this form, you help us create a QuintoAndar Group where everyone feels at home, welcomed, and valued.

If you do not feel comfortable answering any question, simply select the “I prefer not to answer” option.

We are counting on your help to continue improving our processes.

To learn about how we process your personal data, please access our Privacy Notice for Candidates. If you have any questions, please contact us through our Service Channel.

Please, select the options that best describe you.

What is your race/ethnicity?

Select...

What is your gender identity?

Select...

What is your sexual orientation?

Select...

Do you consider yourself a person with a disability?

Select...

If you identified as a person with a disability, which type(s) apply to you? (You can select more than one option)

Select...

Do you identify as a neurodivergent or neurodiverse person?

Select...

Do you have any accessibility needs you would like to share so we can offer the necessary support in your integration process and in the workplace?

Select...