19 hours ago
Remote, TurkeySenior
Responsibilities
- Build and operate SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows.
- Design detection strategies for suspicious activity and data exfiltration using application and database telemetry.
- Extend audit and attribution coverage across Kubernetes, databases, SSO, and access paths while meeting compliance retention requirements.
- Investigate and respond to security incidents, perform root-cause analysis, and drive long-term remediation.
- Conduct proactive threat hunts across cloud and identity environments and build repeatable agentic hunting workflows.
- Manage vulnerability scanning, dependency analysis, external findings, validation, remediation coordination, and verification.
- Triage bug-bounty and other external security findings and coordinate remediation.
- Contribute to threat modeling and security design reviews for detection, logging, and incident-response implications.
- Advise teams on AWS and Kubernetes security and implement controls aligned with PCI DSS, SOC 2, and other compliance requirements.
- Develop automation, including AI-assisted workflows, to improve security operations, detection, and response.
- Participate in the on-call rotation for detection and response and owned services.
Requirements
- 6+ years of experience in security, software, or infrastructure engineering, including hands-on experience securing cloud-based production systems.
- Experience with SIEM platforms such as Wazuh, Splunk, or ELK for detection engineering, monitoring, and incident response.
- Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows.
- Hands-on vulnerability-management experience covering scanning, triage, validation, remediation coordination, and verification.
- Strong knowledge of AWS, Linux, and Kubernetes infrastructure, security architecture, and operational best practices.
- Ability to investigate issues using logs, cloud tooling, and system-level data.
- Experience assessing detection and logging implications during system design reviews.
- Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS guidance.
- Working knowledge of PCI DSS and SOC 2 logging, monitoring, and evidence expectations.
- Demonstrated practical use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred experience building AI-assisted triage, enrichment, or threat-hunting workflows adopted by others.
- Preferred familiarity with log-based detection, telemetry pipelines, security analytics, internal penetration testing, adversarial exercises, cloud-native security controls, IAM, network segmentation, container security, and regulatory compliance.
- Preferred experience operating findings from Snyk, Trivy, or Grype and working in fintech, payments, or other regulated environments.
Benefits
- Full-time role with remote work indicated by the #Li-remote posting tag.
- Compensation is listed as $5,000-$9,500 USD per month, based on experience level.
- Participation in an on-call rotation is required.
- Workplace culture includes musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers.
Tech Stack
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.