14 hours ago
Remote, ChileSenior
Responsibilities
- Design, build, operate, harden, and retire security engineering services in Go and Python on AWS and Kubernetes.
- Own the NATS-based event platform, including contracts, consumers, delivery guarantees, replay, back-pressure, and observability.
- Integrate scanners, the finding system of record, tickets, and metrics so remediation state and examination evidence are visible.
- Own SAST, SCA, secret detection, container scanning, and IaC scanning gates, including tuning, suppression workflows, false-positive reduction, and enforcement rollout tooling.
- Build CI review agents, automated finding triage and verification, remediation helpers, and triage-to-remediation automation.
- Participate in threat modeling, secure design reviews, and the on-call rotation for owned services.
Requirements
- 6+ years of professional software engineering experience, including significant backend experience.
- Strong proficiency in Golang and working proficiency in Python.
- Hands-on experience building and operating event-driven or message-based systems such as NATS or Kafka, including contracts, idempotent consumers, replay, and back-pressure.
- Hands-on experience building and operating CI/CD pipeline tooling, with GitLab CI at fleet scale preferred.
- Hands-on web application security knowledge, including applying the OWASP Top 10 to real code and encoding detections to prevent recurrence.
- Hands-on experience with SAST, SCA, and secret-scanning tools such as Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.
- Demonstrated use of AI tooling and experience building agentic workflows adopted by other engineers.
- Working knowledge of AWS and Kubernetes as deployment targets.
- Preferred qualifications include fintech, payments, BNPL, consumer lending, PCI DSS, SOC 2, SBOM pipelines, dependency governance, artifact signing, provenance, policy-as-code, admission control, bug bounty or vulnerability triage, and system-level threat modeling.
- Candidates are expected to have deployed significant changes to a production application within the past 30 days.
Benefits
- Fully remote work arrangement.
- Full-time employment.
- Participation in an on-call rotation for owned services.
- Opportunity to build security infrastructure, agentic engineering workflows, and automation used across the engineering organization.
Tech Stack
Apache KafkaAWSElasticsearchGitGitLab CI/CDGoKubernetesMySQLPostgreSQLPythonReactReact NativeTypeScript
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.