Senior Security Engineer

Itaú Unibanco

Cyber Security engineer at Itaú responsible for implementing security on cloud platforms. Involves collaboration with engineering teams and managing multiple applications safely.

Posted 7/14/2026full-timeSão Paulo • 🇧🇷 BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing security capabilities on AI platforms, utilizing Infrastructure as Code with Terraform, and applying data loss prevention controls. Proficient in Azure services and security concepts, ensuring compliance with relevant policies and frameworks.

Highest-signal resume keywords

Infrastructure As Code (Terraform)Azure AI FoundryMicrosoft SentinelData Loss Prevention (DLP)Azure Networking

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AI Security ConceptsKQLPythonGoShell

Soft Skills

Technical GuidanceCollaboration

Tools & Technologies

Microsoft Defender For CloudAzure PolicyAPI ManagementKey Vault

Industry Keywords

GDPRAI ActBanking Regulatory Compliance

Tech Stack

Tools & technologies

AzureCloudGoPythonTerraformVault

About the role

Key responsibilities & impact

Provision and maintain security capabilities on the corporate AI platform;
Implement Infrastructure as Code (Terraform or Bicep) with embedded security controls;
Perform hardening of resources such as Azure OpenAI, AI Foundry, AI Search, and Azure ML;
Configure CMK, Private Endpoints, VNets, and Managed Identity for isolation of AI workloads;
Implement and operate technical guardrails for the safe use of generative models and assistants;
Instrument AI event telemetry and integrate logs, alerts, and correlations into Microsoft Sentinel;
Apply and operationalize DLP controls and data classification in partnership with security and compliance teams;
Work with engineering, AI, and data teams to incorporate security-as-code and shift-left practices into the platform lifecycle;
Create runbooks, operational standards, automations, and control-coverage indicators for the platform;
Provide technical guidance to less experienced professionals and collaborate with SecOps to investigate anomalies and incidents.

Requirements

What you’ll need

Azure AI Foundry and Azure OpenAI (deployment, networking, content filters);
DLP, sensitivity labels, and Insider Risk applied to AI;
Azure Policy and Microsoft Defender for Cloud;
Microsoft Sentinel, Log Analytics, and KQL for monitoring and event correlation;
Azure networking applied to security (Private Link, VNets, Firewall);
CMK, Managed Identity, Key Vault, and access controls for workload isolation;
API Management for secure exposure of AI services;
Infrastructure as Code (Terraform) as a mandatory requirement;
AI security concepts (prompt injection, jailbreaking, model poisoning, data poisoning, membership inference) at a practical level for platform controls;
Threat hunting in AI in collaboration with SecOps;
Adversarial ML at a conceptual level, working together with Red Team;
Policies and compliance frameworks applicable to AI (GDPR, AI Act, banking regulatory compliance);
At least one automation/programming language (Python, Go, Shell, or similar).

Benefits

Comp & perks

Transportation allowance (Vale-Transporte)
Meal voucher (restaurants) / Grocery voucher (supermarkets)
Medical plan (Fundação Saúde Itaú or Central Nacional Unimed)
Dental plan (Odontoprev or Interodonto)
Life insurance
Profit-sharing (PLR) — Participation in Profits and Results (subject to bank performance)
Private pension plan
Exclusive discounts on our financial products
Extended maternity and paternity leave
Childcare / nanny allowance (for parents)
Education assistance
Wellhub or TotalPass (wellness benefits)
Access to Itaú Leisure Clubs (Guarapiranga / Itanhaém and São Sebastião)
+ Some additional benefits you may learn about during the process 😊