14 hours ago
Remote, BrazilSenior
Responsibilities
- Design, build, operate, harden, and retire security engineering services in Golang and Python on AWS and Kubernetes.
- Own the NATS event-driven platform, including contracts, consumers, delivery guarantees, replay, back-pressure, and observability.
- Integrate scanners, finding systems of record, tickets, metrics, and remediation workflows end to end.
- Own SAST, SCA, secret-detection, container-scanning, and IaC-scanning gates, including tuning, suppression workflows, and enforcement rollout tooling.
- Build CI review agents, automated finding triage and verification, remediation helpers, and triage-to-remediation automation.
- Participate in threat modeling, secure design reviews, and the on-call rotation for owned services.
Requirements
- 6+ years of professional software engineering experience, including significant backend experience.
- Strong proficiency in Golang and working proficiency in Python.
- Hands-on experience building and operating event-driven or message-based systems such as NATS or Kafka, including contracts and idempotent consumers.
- Hands-on experience building and operating CI/CD pipeline tooling; GitLab CI at fleet scale is a strong plus.
- Hands-on web application security knowledge, including applying the OWASP Top 10 to real code.
- Hands-on experience with SAST, SCA, and secret-scanning tools such as Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.
- Demonstrated current use of AI development tooling and experience building agentic workflows adopted by other engineers.
- Working knowledge of AWS and Kubernetes.
- Preferred experience includes fintech or regulated systems, PCI DSS, SOC 2, SBOM pipelines, dependency governance, artifact signing, provenance, policy-as-code, admission control, bug-bounty or vulnerability-report triage, and system-level threat modeling.
- A significant production application change must have been deployed within the past 30 days.
Benefits
- Fully remote work arrangement.
- Full-time employment.
- Opportunity to build security infrastructure used across the engineering organization.
- Opportunity to work with AI-assisted engineering and agentic security workflows.
Tech Stack
Apache KafkaAWSElasticsearchGitGitLab CI/CDGoKubernetesMySQLPostgreSQLPythonReactReact NativeTypeScript
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.