14 hours ago
Remote, MexicoSenior
Responsibilities
- Design, build, operate, harden, and retire security engineering services in Go and Python on AWS and Kubernetes.
- Own the NATS event-driven platform, including contracts, consumers, delivery guarantees, replay, back-pressure, and observability.
- Integrate scanners, the finding system of record, tickets, and metrics to make remediation state visible.
- Own SAST, SCA, secret-detection, container-scanning, and IaC-scanning gates, including tuning, suppression workflows, and enforcement rollouts.
- Build CI review agents, automated finding triage and verification, remediation helpers, and triage-to-remediation automation.
- Participate in threat modeling, secure design reviews, and on-call support for owned services.
Requirements
- 6+ years of professional software engineering experience, including significant backend experience.
- Strong proficiency in Golang and working proficiency in Python.
- Hands-on experience building and operating event-driven or message-based systems such as NATS or Kafka, including contracts, idempotent consumers, replay, and back-pressure.
- Hands-on experience building and operating CI/CD pipeline tooling; GitLab CI at fleet scale is a strong plus.
- Hands-on web application security knowledge, including applying the OWASP Top 10 to real code.
- Experience with SAST, SCA, and secret-scanning tools such as Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.
- Demonstrated use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations, including building adopted agentic workflows.
- Working knowledge of AWS and Kubernetes as deployment targets.
- Preferred experience includes fintech or payments, PCI DSS, SOC 2, SBOM pipelines, dependency governance, artifact signing, provenance, policy-as-code, admission control, bug-bounty triage, and system-level threat modeling.
- The posting states that candidates should have deployed significant changes to a production application in the past 30 days.
Benefits
- Fully remote work arrangement.
- Full-time employment.
- Opportunity to build security infrastructure and agentic engineering workflows used across the organization.
- Work alongside detection and response and network and zero-trust engineering teams.
Tech Stack
Apache KafkaAWSElasticsearchGitGitLab CI/CDGoKubernetesMySQLPostgreSQLPythonReactReact NativeTypeScript
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.