19 hours ago
Remote, MexicoSenior
Responsibilities
- Build and operate SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows.
- Design detection strategies for suspicious activity and data exfiltration using application and database telemetry.
- Extend audit and attribution coverage across Kubernetes, databases, SSO, and access paths while meeting retention requirements.
- Investigate and respond to security incidents, perform root cause analysis, and drive long-term fixes.
- Run proactive threat hunts across cloud and identity environments and build repeatable agentic hunting workflows.
- Own vulnerability management, including scanning, dependency analysis, finding validation, remediation coordination, and verification.
- Triage external security findings and bug bounty reports and coordinate remediation.
- Contribute to threat modeling and security design reviews for detection, logging, and incident response.
- Advise teams on AWS and Kubernetes security remediation and implement controls aligned with PCI DSS, SOC 2, and other requirements.
- Develop automation, including AI-assisted workflows, for security operations, detection, and response.
- Participate in the on-call rotation for detection and response and owned services.
Requirements
- 6+ years of experience in security, software, or infrastructure engineering with hands-on experience securing cloud-based production systems.
- Experience with SIEM platforms such as Wazuh, Splunk, or ELK for detection engineering, monitoring, and incident response.
- Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows.
- Strong hands-on vulnerability-management experience, including scanning, triage, validation, remediation coordination, and verification.
- Strong knowledge of AWS, Linux, and Kubernetes infrastructure, security architecture, and operational best practices.
- Ability to investigate issues directly using logs, cloud tooling, and system-level data.
- Experience assessing detection and logging implications during system design reviews.
- Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS guidance.
- Working knowledge of PCI DSS and SOC 2 logging, monitoring, and evidence expectations.
- Demonstrated practical use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred: experience building adopted AI-assisted triage, enrichment, or hunting workflows.
- Preferred: experience with log-based detection, telemetry pipelines, security analytics, internal penetration testing, or adversarial exercises.
- Preferred: understanding of IAM, network segmentation, container security, and container or dependency security tools such as Snyk, Trivy, and Grype.
- Preferred: experience in fintech, payments, or other regulated environments.
Benefits
- Full-time remote role.
- Work includes participation in an on-call rotation.
- Company culture includes activities and interests such as music, yoga, cycling, cooking, golf, dog ownership, and rock climbing.
Tech Stack
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.