Role Overview
The Senior Security Infrastructure Engineer position at Sezzle is a remote, hands-on role based in Colombia that focuses on strengthening security posture across cloud environments and developer workflows. This opportunity suits an autonomous technical professional with over six years of experience who enjoys solving real-world security challenges at scale.
Key Responsibilities
Lead and operate vulnerability management procedures across applications, platforms, and infrastructure by executing internal scans and managing dependency analyses.
Build, mature, and operate SIEM and XDR capabilities, which include log ingestion, alert tuning, and detection rule creation.
Investigate and resolve security incidents across cloud infrastructure and applications while performing root cause analyses.
Design and execute detection strategies for suspicious behaviors, such as data exfiltration patterns derived from database and application telemetry.
Lead threat modeling exercises and security design reviews to uncover risks early in the architecture phase.
Apply deep knowledge of AWS and Kubernetes to design, secure, and scale cloud infrastructure.
Drive infrastructure and CI/CD hardening initiatives to mitigate container and software supply chain risks.
Partner directly with engineering teams to remediate vulnerabilities and champion secure development practices.
Support compliance requirements aligned with standards such as PCI DSS and SOC 2.
Develop automation, including artificial intelligence tools, to streamline security operations, detection, and response.
Triage and validate external security findings from bug bounty programs and scanners.
Requirements
Minimum of 6 years of professional experience in security, infrastructure, or software engineering.
Hands-on background securing cloud-based production systems and navigating complex security challenges.
Practical experience with vulnerability management, covering scanning, triage, validation, and remediation coordination.
Working knowledge of SIEM platforms like Wazuh, Splunk, or ELK for monitoring and incident response.
Strong technical command of AWS, Linux, and Kubernetes infrastructure, including security architecture and hardening best practices.
Experience improving infrastructure security through CI/CD hardening and supply chain risk mitigation.
Familiarity with container and dependency security tools such as Snyk, Trivy, or Grype.
Understanding of common security vulnerabilities and mitigation frameworks like OWASP and SANS.
Practical knowledge of compliance frameworks including SOC 2 and PCI DSS.
Demonstrated experience utilizing Claude or equivalent large language model tools to enhance communication, research, and productivity.
Nice to Have
Experience designing and tuning detection rules to reduce alert noise and optimize investigation workflows.
Strong familiarity with cloud-native security controls covering network segmentation and IAM.
Background in designing secure CI/CD workflows to minimize exposure to untrusted artifacts.
Experience aligning technical security operations with regulatory expectations.
Skills and Tools
Programming Languages: Python, Golang, TypeScript
Frontend and Mobile: React, React Native
Backend and Databases: Golang, MySQL, Postgres, Elasticsearch
Cloud and DevOps: AWS, Kubernetes, Git, GitLab
Security and AI Tools: SIEM platforms, container security tools, Claude or equivalent LLMs
Salary and Benefits
Monthly Gross Compensation: $5,000 - $9,500 USD based on experience level.
About the Company
Sezzle is a financial technology company on a mission to financially empower the next generation through innovative, interest-free installment plans. The organization blends cutting-edge technology with seamless retail experiences to drive real impact for merchants and consumers. Sezzle values open-source solutions, rapid action, calculated risk-taking, and high operational standards.
How to Apply
Interested candidates should visit the official Sezzle careers page to submit an application for this remote position.
