14 hours ago
Remote, IndiaSenior
Responsibilities
- Design, build, operate, harden, and retire security engineering services primarily in Go and Python on AWS and Kubernetes.
- Own the NATS event-driven platform, including contracts, consumers, delivery guarantees, replay, back-pressure, and observability.
- Integrate scanners, findings, tickets, metrics, and remediation workflows end to end.
- Own SAST, SCA, secret-detection, container-scanning, and IaC-scanning gates, including tuning, suppression workflows, and enforcement rollout tooling.
- Build CI review agents, automated finding triage and verification, remediation helpers, and triage-to-remediation automation.
- Participate in threat modeling, secure design reviews, and the on-call rotation for owned services.
Requirements
- 6+ years of professional software engineering experience, including significant backend experience.
- Strong proficiency in Go and working proficiency in Python.
- Hands-on experience building and operating event-driven or message-based systems such as NATS or Kafka, including contracts, idempotent consumers, replay, and back-pressure.
- Hands-on experience building and operating CI/CD pipeline tooling, with GitLab CI at fleet scale preferred.
- Hands-on web application security knowledge, including applying the OWASP Top 10 to real code.
- Experience with SAST, SCA, and secret-scanning tools such as Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.
- Demonstrated use of AI tooling and experience building agentic workflows adopted by other engineers.
- Working knowledge of AWS and Kubernetes as deployment targets.
- Preferred qualifications include fintech, payments, BNPL, or regulated-system experience; PCI DSS and SOC 2 knowledge; SBOM, dependency governance, artifact signing and provenance experience; policy-as-code and admission-control familiarity; bug-bounty or vulnerability-report triage; and system-level threat-modeling experience.
Benefits
- Fully remote, full-time role with the ability to work from anywhere.
- Opportunity to build a foundational security platform and reusable AI-assisted engineering workflows.
- Participation in an on-call rotation for owned services.
Tech Stack
Apache KafkaAWSElasticsearchGitGitLab CI/CDGoKubernetesMySQLPostgreSQLPythonReactReact NativeTypeScript
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.