Senior Software Engineer, Security Platform
Sezzle · Chile, Remote
About this role
**Senior Software Engineer, Security Platform** **Salary Range:** $5,000 – $9,500 per month (Gross in USD) **About Sezzle** Sezzle’s mission is to financially empower the next generation. We’re revolutionizing the shopping experience beyond payments with seamless, interest-free installment plans—driving real impact for merchants through increased conversions and higher order values. **About the Role** Sezzle is seeking a hands-on **Senior Software Engineer (Security Platform)** to build and own the platform the security team runs on. You’ll design, build, and operate services that **discover, scan, triage, and route security findings**, along with the **event-driven bus** connecting them and the **CI security gates** every team’s pipeline runs through. This is a **development role** (not a security-analyst role). Most of your time will go into building and operating security engineering services primarily in **Go and Python** on **Kubernetes**, including: - New services and ongoing upkeep/hardening of an existing fleet - An **NATS-based event platform** for moving findings, inventory changes, and notifications - Security gates in **GitLab CI** (SAST, SCA, secret detection, container & IaC scanning) - Agentic triage and review workflows You’ll report to the **Director of Information Security** and work alongside engineers who own detection/response and network/zero trust—your platform enables their work. **What You’ll Do** - Design, build, and operate security engineering services in **Go (and Python)** on **AWS and Kubernetes** - Own the **event-driven platform** (NATS bus, contracts/consumers, delivery guarantees, observability) - Integrate the platform end-to-end: **scanners → finding system-of-record → tickets → metrics** - Own delivery of security gates: **SAST, SCA, secret detection, container & IaC scanning** (tuning, suppression workflows, false-positive burn-down, rollout tooling) - Build **agentic security workflows** (CI review agents, automated triage/verification, remediation helpers) - Build **triage-to-remediation automation** (validate true positives, then automate the loop with reproduction context, fix guidance, and routing) - Participate in **threat modeling** and secure design reviews - Participate in an **on-call rotation** for services you own **What We Look For** - **6+ years** of professional software engineering experience (significant backend experience) - Deployed significant changes to a production application in the past 30 days - Strong proficiency in **Golang** and working proficiency in **Python** - Hands-on experience with **event-driven/message-based systems** (e.g., **NATS/Kafka**): contracts, idempotent consumers, replay, back-pressure - Hands-on experience building/operating **CI/CD pipeline tooling** (GitLab CI at fleet scale is a plus) - Hands-on web application security knowledge (OWASP Top 10 in real code; able to fix and encode detection) - Hands-on experience with **SAST/SCA/secret-scanning** tools (e.g., Semgrep, CodeQL, Snyk, Trivy, Grype, gitleaks) and tuning for developer-acceptable signal-to-noise - Demonstrated **AI-forward engineering** (e.g., Claude Code/Codex/Cursor/custom LLM integrations) and agentic workflows adopted by others - Working knowledge of **AWS and Kubernetes** **Preferred Knowledge and Skills** - Fintech/payments/BNPL/consumer lending experience (especially regulated/cardholder-data scope) - Working knowledge of **PCI DSS** and **SOC 2** as they apply to software
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.