19 hours ago
Remote, ArgentinaSenior
Responsibilities
- Build and operate SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows.
- Design detection strategies for suspicious activity and data exfiltration using application and database telemetry.
- Extend audit and attribution coverage across Kubernetes, databases, SSO, and access paths while meeting compliance retention requirements.
- Investigate and respond to security incidents, perform root cause analysis, and drive long-term fixes.
- Conduct proactive threat hunts across cloud and identity environments and build repeatable agentic hunting workflows.
- Operate vulnerability management across infrastructure, platforms, and applications, including scanning, dependency analysis, finding validation, remediation coordination, and verification.
- Triage external security findings and bug bounty reports and coordinate remediation.
- Contribute to threat modeling and security design reviews for detection, logging, and incident-response implications.
- Apply AWS and Kubernetes security expertise and advise engineering teams on remediation.
- Implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements.
- Develop automation, including AI-assisted workflows, to improve security operations, detection, and response.
- Participate in the detection and response on-call rotation.
Requirements
- 6+ years of experience in security, software, or infrastructure engineering with hands-on experience securing cloud-based production systems.
- Experience with SIEM platforms such as Wazuh, Splunk, or ELK for detection engineering, monitoring, and incident response.
- Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows.
- Strong hands-on vulnerability management experience, including scanning, triage, validation, remediation coordination, and verification.
- Strong knowledge of AWS, Linux, and Kubernetes infrastructure and security practices.
- Ability to investigate issues using logs, cloud tooling, and system-level data.
- Experience assessing detection and logging implications during system design reviews.
- Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS guidance.
- Working knowledge of PCI DSS and SOC 2, particularly logging, monitoring, and evidence expectations.
- Demonstrated hands-on use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred experience building adopted AI-assisted triage, enrichment, or threat-hunting workflows.
- Preferred familiarity with log-based detection, telemetry pipelines, security analytics, internal penetration testing, adversarial exercises, cloud-native security controls, IAM, network segmentation, and container security.
- Preferred experience with Snyk, Trivy, or Grype and with regulated fintech or payments environments.
Benefits
- Full-time remote role.
- Monthly gross compensation of $5,000-$9,500 USD based on experience level.
- Participation in an on-call rotation for detection and response and owned services.
Tech Stack
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.