Sr Cyber Engineer | Atom Security - Squads

Our Security Engineering area

We work on building and maintaining an increasingly secure bank; the active participation of the Security Engineering team in all stages of product construction is fundamental! This is the role of the Security Engineer at C6: Applying multidisciplinary knowledge in the definition of requirements and controls, the Security Engineer adds their expertise so that the product is built following security best practices and evaluating the unique risks for each product from its conception, in order to provide the most effective protections throughout the development of each service and/or product.

This Shift Left approach utilizes the diverse knowledge of the Security Engineer, whether in cyber defense tools and processes, attack methods, or secure development frameworks and practices, to identify and treat existing risks still during the construction of our products.

Your activities as a CSixer

The day-to-day of the Security Engineer consists of ensuring that Information Security rules and best practices are being applied to all products and services offered and contracted by C6 Bank;

Additionally, the Security Engineering area is responsible for the Security Champions program at C6 Bank, whose objective is to spread Information Security concepts and share experiences in Sec Talks, a joint initiative with the Red Team and Application Security areas;

Furthermore, we have Research & Development initiatives to create secure solutions and dashboards to make available to all of C6 Bank.

Requirements and experience

• Knowledge of Information Security best practices and standards;
• Practical knowledge in threat modeling (STRIDE, MITRE ATT&CK);
• Ability to interpret system architectures to identify Information Security risks and suggest mitigators;
• Deep knowledge in Operating Systems, Networks, Data Structures, and Cloud environments (AWS, GCP, Azure, OCI);
• Experience in implementing security controls in Cloud Computing solutions (IaaS, PaaS, and SaaS);
• Experience in security controls for Networks, Operating Systems, Web and Mobile Applications, REST APIs, Databases;
• Knowledge of system integration with Identity Provider (SAML, OIDC, SCIM);
• Knowledge in data Cryptography;
• Knowledge in event and log correlation tools (SIEM);
• Knowledge in Infrastructure Automation systems (such as Ansible, Terraform, CFEngine);
• Knowledge of Secure Development techniques;
• Desirable knowledge in Programming Languages (such as Python, Go, Shell, Java, Kotlin);
• Functional knowledge of the English language.

Our benefits

• Meal Voucher;
• Food Voucher;
• Health and dental plan;
• Daycare assistance;
• Life Insurance;
• WellHub | TotalPass;
• Conexa | Psicologia Viva - Online therapy at no cost;
• Carbon Academy;
• Cartão C6 Carbon;
• Carbon Spa - Beauty salon located in our office;
• Carbon Care - Clinic located in our office;
• Breastfeeding room;
• Empresa Cidadã - Extension of maternity and paternity leave;
• Bicycle rack;
• Locker room;
• Corporate van;
• Living space - Video game, pool table, playball, barbecue area, beer tap, snack bar, various rest areas, hammocks, basketball hoop, and collaborative organic garden.

C6 BANK

FOR AN EXTRAORDINARY LIFE

We serve individuals, MEIs, and SMEs in all states of Brazil. Without physical branches, we offer more than 90 financial products and services made for all customer profiles.

We are located in São Paulo/SP and have more than 3,000 CSixers who are always going a thousand miles an hour. In just over five years, we have won many awards and recognitions.

At C6 Bank, we believe that diversity drives innovation and strengthens our work environment. Therefore, we promote an inclusive culture that values equity and ensures opportunities for all people, regardless of race, color, age, creed, disability, nationality, marital status, sexual orientation, identity, or gender expression. Here, everyone is welcome to be who they are.

Check more information in the video below: