19 hours ago
Remote, BrazilSenior
Responsibilities
- Build and operate SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows.
- Design detection strategies and expand audit and attribution coverage across cloud infrastructure, Kubernetes, databases, SSO, and access paths.
- Investigate and respond to security incidents, perform root-cause analysis, and drive long-term remediation.
- Run proactive threat hunts across cloud and identity environments and develop repeatable agentic hunting workflows.
- Manage vulnerability scanning, dependency analysis, bug-bounty findings, true-positive validation, remediation coordination, and verification.
- Contribute to threat modeling and security design reviews, implement compliance-aligned controls, and participate in detection and response on-call rotations.
- Develop AI-assisted automation to improve security operations, detection, response, triage, and investigation efficiency.
Requirements
- At least 6 years of experience in security, software, or infrastructure engineering with hands-on experience securing cloud-based production systems.
- Experience with SIEM platforms such as Wazuh, Splunk, or ELK for detection engineering, monitoring, and incident response.
- Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows.
- Strong hands-on vulnerability-management experience, including scanning, finding validation, remediation coordination, and verification.
- Strong knowledge of AWS, Linux, and Kubernetes infrastructure and security practices.
- Ability to investigate issues using logs, cloud tooling, and system-level data.
- Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS guidance.
- Working knowledge of PCI DSS, SOC 2, and related logging, monitoring, and evidence expectations.
- Demonstrated practical use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred qualifications include AI-assisted workflow development, log-based detection, telemetry pipelines, penetration testing or adversarial exercises, cloud-native security controls, IAM, network segmentation, container security, Snyk, Trivy, Grype, regulated-industry experience, and fintech or payments experience.
Benefits
- Full-time, remote role.
- Participation in an on-call rotation for detection and response and owned services.
Tech Stack
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.