20 hours ago
Bogotá, ColombiaSenior
Responsibilities
- Build and operate SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows.
- Design detection strategies for suspicious activity and data exfiltration using application and database telemetry.
- Extend audit and attribution coverage across Kubernetes, databases, SSO, and access paths while meeting compliance retention requirements.
- Investigate security incidents, perform root cause analysis, and drive long-term remediation.
- Run proactive threat hunts across cloud and identity environments and build repeatable agentic hunting workflows.
- Manage vulnerabilities across infrastructure, platforms, and applications, including scanning, dependency analysis, external findings, validation, and remediation coordination.
- Triage bug bounty and other external security findings and coordinate fixes.
- Contribute to threat modeling and security design reviews for detection, logging, and incident-response implications.
- Apply AWS and Kubernetes security expertise and advise engineering teams on remediation.
- Implement controls aligned with PCI DSS, SOC 2, and other compliance requirements.
- Develop AI-assisted automation for security operations, detection, and response.
- Participate in the detection and response on-call rotation.
Requirements
- 6+ years of experience in security, software, or infrastructure engineering with hands-on experience securing cloud-based production systems.
- Experience with SIEM platforms such as Wazuh, Splunk, or ELK for detection engineering, monitoring, and incident response.
- Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows.
- Strong hands-on vulnerability management experience, including scanning, triage, validation, remediation coordination, and verification.
- Strong knowledge of AWS, Linux, and Kubernetes infrastructure and security practices.
- Ability to investigate issues using logs, cloud tooling, and system-level data.
- Experience assessing detection and logging implications during system design reviews.
- Knowledge of common vulnerabilities and mitigation strategies, including OWASP and SANS guidance.
- Working knowledge of PCI DSS and SOC 2 logging, monitoring, and evidence expectations.
- Demonstrated hands-on use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred experience building adopted AI-assisted triage, enrichment, or hunting workflows.
- Preferred familiarity with telemetry pipelines, security analytics, internal penetration testing, adversarial exercises, cloud-native security controls, IAM, network segmentation, container security, and tools such as Snyk, Trivy, and Grype.
- Experience in fintech, payments, or other regulated environments is preferred.
Benefits
- Full-time remote role.
- Participation in an on-call rotation.
- Compensation is stated as $5,000–$9,500 USD per month, gross, based on experience.
- Work environment emphasizes AI-assisted engineering, open-source usage, and a broad range of employee interests and activities.
Tech Stack
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.