19 hours ago
Remote, IndiaSenior
Responsibilities
- Build and operate SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows.
- Design detection strategies for suspicious activity and data exfiltration using application and database telemetry.
- Extend audit and attribution coverage across Kubernetes, databases, SSO, and access paths while meeting compliance retention requirements.
- Investigate and respond to security incidents, perform root cause analysis, and drive long-term remediation.
- Run proactive threat hunts across cloud and identity environments and build repeatable agentic hunting workflows.
- Operate vulnerability management across infrastructure, platforms, and applications, including scanning, dependency analysis, finding validation, and remediation verification.
- Triage external security findings and bug bounty reports and coordinate remediation.
- Contribute to threat modeling and security design reviews for detection, logging, and incident-response implications.
- Apply AWS and Kubernetes security judgment and advise engineering teams on remediation.
- Implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements.
- Develop automation, including AI-assisted workflows, to improve security operations, detection, and response.
- Participate in the on-call rotation for detection and response and owned services.
Requirements
- 6+ years of experience in security, software, or infrastructure engineering with hands-on experience securing cloud-based production systems.
- Experience with SIEM platforms such as Wazuh, Splunk, or ELK for detection engineering, monitoring, and incident response.
- Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows.
- Hands-on vulnerability-management experience covering scanning, triage, validation, remediation coordination, and verification.
- Strong knowledge of AWS, Linux, and Kubernetes infrastructure, security architecture, and operational best practices.
- Ability to investigate issues using logs, cloud tooling, and system-level data.
- Experience assessing detection and logging implications during system design reviews.
- Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS.
- Working knowledge of PCI DSS and SOC 2, particularly logging, monitoring, and evidence expectations.
- Demonstrated practical use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred experience building adopted AI-assisted triage, enrichment, or threat-hunting workflows.
- Preferred familiarity with log-based detection, telemetry pipelines, security analytics, internal penetration testing, adversarial exercises, cloud-native security controls, IAM, network segmentation, and container security.
- Preferred experience with Snyk, Trivy, or Grype and with fintech, payments, or other regulated environments.
Benefits
- Full-time remote position.
- Monthly gross salary range of $5,000-$9,500 USD, based on experience.
- Participation in an on-call rotation is required.
- Work involves AI-assisted engineering and agentic security workflows.
Tech Stack
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.