About Grupo QuintoAndar
We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.
With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.
Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/.
Location & Remote Work
Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.
About the Position
The Cyber Threat Intelligence Senior Engineer will be the primary technical owner of the Threat Intelligence area, ensuring compliance with the program’s strategy, doctrine, and operational standards. The main focus is the production of actionable intelligence, management of the full CTI lifecycle, and leadership of advanced collection efforts, with emphasis on the threat and fraud landscape in Brazil and Latin America. The professional will act as the CTI focal point for the entire organization, raising the technical level of the Cyber team and building a robust, automated architecture to support the program.
Key Responsibilities
- Doctrine and Technical Leadership: Develop, implement, and maintain the organization’s Cyber Threat Intel doctrine, ensuring the consistency, effectiveness, and maturity of the program.
- Knowledge Base: Build and consolidate a structured, scalable CTI knowledge base, centralizing information on relevant threat actors, TTPs, campaigns, and IoCs.
- CTI Engineering Architecture & Automation: Design and implement robust architectures to connect intelligence sources to Data Lakes and the Security tooling ecosystem. Use automation/orchestration tools (SOAR, data pipelines, and API integrations) to ensure the delivery of actionable intelligence, enabling correlation, dynamic enrichment, and agility in data consumption.
- Comprehensive Intelligence Production: Lead the production of actionable reports, alerts, and briefings at the Strategic, Tactical, and Operational levels for audiences ranging from security analysts to senior executives.
- CTI Lifecycle Management: Demonstrate technical mastery and lead the management of all phases of the intelligence cycle (Direction, Collection, Processing, Analysis, and Dissemination), supporting and guiding other team members in the day-to-day operational demands of the SOC.
- Detection Engineering & Threat Hunting: Master the discipline of Threat Hunting. Understand complex threat scenarios, map key adversaries, and translate actionable intelligence into effective detection rules and hardening recommendations for security controls.
- Advanced Collection and OPSEC: Lead specialized collection efforts using advanced OSINT techniques, maintaining a rigorous OPSEC standard in interactions and collections in closed/restricted forums and channels.
- Brand Protection: Develop and continuously improve the Brand Protection practice, combating phishing, digital fraud, and brand misuse together with strategic partners and internal teams.
- Vendor Management and Feed Integration: Manage relationships, technical evaluation, procurement, and integration of CTI feeds, optimizing the quality of the information received.
- Regional Focus and Anti-Fraud: Maintain continuous specialization in the cybercrime and fraud landscape in Brazil and Latin America, translating regional insights into actionable intelligence and tactical deliverables targeted at the company’s assets.
Qualifications and Required Skills
- Professional Experience: Minimum of 5 years of proven experience in Cyber Threat Intelligence roles, Security Engineering with a focus on Intelligence, Malware Analysis, or Security Research.
- CTI Architecture and Automation: Hands-on experience building intelligence pipelines, automating processes via APIs/scripts (Python, Go, etc.), and integrating CTI tools with Data Lakes, SIEM, SOAR, and EDR.
- Frameworks and Doctrine: Strong practical knowledge in applying established threat intelligence frameworks (e.g., MITRE ATT&CK, Diamond Model, Cyber Kill Chain, STIX/TAXII).
- Analysis and Correlation: Proficiency in critical analysis of threat data, correlation of events from multiple data sources, and contextualization of corporate risks.
- Communication: Excellent written and verbal communication skills in Portuguese and English (Spanish is a plus), with the ability to synthesize complex technical concepts for executive and operational audiences.
Benefits
- Competitive salary
- Profit sharing
- Meal allowance
- Health insurance
- Dental plan
- Life insurance
- Childcare subsidy and Atypical Parenthood subsidy
- Wellhub
- Home office allowance
- Employee assistance program (mental health, social, legal, and financial support)
- Extended parental leave
- Day off on birthday, Mother’s Day, and Father’s Day
- Benefits Club (discounts on everyday services)
- Discounts at educational institutions
- Reading kit for children – PlayKids
Diversity & Inclusion at Grupo QuintoAndar
We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!
You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.
Privacy and Data Protection
The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates. For questions or to exercise your rights as a data subject, please contact us through our Service Channel.
Skills Required
- Proven experience in Cyber Threat Intelligence, malware analysis, or security research roles
- Strong knowledge and hands-on experience applying intelligence frameworks, including the Diamond Model, Kill Chain, or MITRE ATT&CK
- Proficiency in threat data analysis and correlating information from multiple sources to identify trends and threat actors
- Excellent written and verbal communication skills in Portuguese and English
- Spanish-language proficiency
- Proven experience in technical leadership, coordination, or mentoring of CTI or defense teams
What We Do
QuintoAndar is a Brazilian technology company operating a digital housing marketplace across Latin America. Its platform helps people rent, buy, and sell residential properties through a more direct and transparent process, including online visit scheduling, digital contracts, and streamlined transactions. The company aims to simplify housing experiences for both residents and property owners while using technology to modernize the real estate market.
