About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/.

About Working at QuintoAndar

Possibility of learning;
Opportunity to work in a team that seeks to use the best practices and tools in the market;
Work in an informal environment with a horizontal structure;
Being part of a team working on a high-impact project that affects the lives of thousands of people.

Location & Remote Work

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

Language

This job description is written in English because for that position you will need it for communications with coworkers and suppliers who are from worldwide, for tools and internal materials as well.

Hiring Process Stages

Our selection process currently lasts an average of 40 days, from application to completion of the assessment. Going through:

Application
Interview with Recruiters
Tech Screening with Engineering Team (Coding Interview)
Technicals Interviews (Architecture live cases)
Offer

About the Role

QuintoAndar is transforming the real estate ecosystem globally through cutting-edge technology, product velocity, and operational scale. As our digital footprint expands across distributed platforms, microservices, and regional markets, traditional penetration testing and point-in-time assessments can no longer match our pace of deployment.

We are seeking a Senior Offensive Security Engineer (SE4 - Banda 8) to spearhead a paradigm shift: pioneering, architecting, and piloting our AI-Driven Offensive Security Program. In this role, you will design and orchestrate a distributed "squad" of autonomous AI agents capable of continuous reconnaissance, dynamic attack surface mapping, deep penetration testing, smart triage, and automated verification across QuintoAndar's global infrastructure, containerized workloads, Kubernetes clusters, and customer-facing products.

Operating as a Senior Engineer, you will combine world-class offensive engineering depth with strategic systems design, stakeholder influence, and mentorship. You will bridge offensive capabilities directly with our Defensive Security, Cyber Threat Intelligence (CTI), Vulnerability Management, and Engineering teams, ensuring risks are mapped, contextualized, and systematically eliminated.

Key Responsibilities

Strategy, Architecture & Technical Ownership

Architect Autonomous Offensive Systems: Design, build, and pilot the end-to-end architecture of an AI-agent-powered offensive security platform. Select model paradigms, agentic frameworks, and tool-use orchestration pipelines to autonomously identify attack paths, test APIs/applications, and probe cloud-native environments.
Global Attack Surface Operations: Plan, conduct continuous, systematic testing against QuintoAndar’s global attack surface, complex microservices architectures, containerized workloads, and kubernetes clusters.
Unified Ecosystem Integration: Close the loop between offense and defense. Connect automated agent findings with Vulnerability Management pipelines, SIEM/SOAR platforms, CTI feeds, and Blue Team detection engineering workflows to drive real-time remediation, automated retests, and proactive defense tuning.