14 hours ago
Bogotá, ColombiaSenior
Responsibilities
- Design, build, operate, harden, and retire security engineering services in Go and Python on AWS and Kubernetes.
- Own the NATS event-driven platform, including contracts, consumers, delivery guarantees, and observability.
- Integrate scanners, the finding system of record, tickets, and metrics to make remediation state visible.
- Own SAST, SCA, secret detection, container scanning, and infrastructure-as-code scanning gates, including tuning and enforcement rollouts.
- Build agentic CI review, automated triage and verification, remediation, and vulnerability-routing workflows.
- Participate in threat modeling, secure design reviews, and on-call support for owned services.
Requirements
- 6+ years of professional software engineering experience, including significant backend experience.
- Strong proficiency in Golang and working proficiency in Python.
- Hands-on experience building and operating event-driven or message-based systems such as NATS or Kafka, including contracts, idempotent consumers, replay, and back-pressure.
- Hands-on experience building and operating CI/CD pipeline tooling; GitLab CI at fleet scale is preferred.
- Hands-on web application security knowledge, including applying the OWASP Top 10 in production code.
- Experience with SAST, SCA, and secret-scanning tools such as Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.
- Demonstrated practical use of AI tooling and experience building agentic workflows adopted by other engineers.
- Working knowledge of AWS and Kubernetes.
- Preferred experience includes fintech or regulated systems, PCI DSS, SOC 2, SBOM pipelines, dependency governance, artifact signing, provenance, policy-as-code, admission control, bug bounty triage, and system-level threat modeling.
- Candidates are expected to have deployed significant changes to a production application within the past 30 days.
Benefits
- Fully remote work arrangement.
- Full-time employment.
- Opportunity to build security infrastructure and agentic engineering workflows used across the organization.
Tech Stack
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.