About the company
With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans. We're building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey.
About the role
We are seeking a hands-on Senior Software Engineer, Security Platform, to build and own the platform the security team runs on: the services that discover, scan, triage and route security findings, the event-driven bus that connects them, and the CI security gates every team's pipeline runs through. This is a development role on the security team, not a security-analyst role. You will report to the Director of Information Security.
Responsibilities
- Design, build, and operate security engineering services primarily in Golang and Python, on AWS and Kubernetes.
- Own the event-driven platform between the security services: the NATS bus, its contracts and consumers, delivery guarantees and observability.
- Integrate the platform end-to-end: scanners → finding system-of-record → tickets → metrics.
- Own delivery of the security gates — SAST, SCA, secret detection, container and IaC scanning.
- Build agentic security workflows: CI review agents, automated finding triage and verification, remediation helpers.
- Build the triage-to-remediation automation.
- Participate in threat modeling and secure design reviews.
- Participate in the on-call rotation for the services you own.
Requirements
- 6+ years of professional software engineering experience, including significant backend experience.
- Strong proficiency in Golang, plus working proficiency in Python.
- Hands-on experience building and operating event-driven or message-based systems (NATS, Kafka, or similar).
- Hands-on experience building and operating CI/CD pipeline tooling — GitLab CI at fleet scale is a strong plus.
- Hands-on web application security knowledge: the OWASP Top 10 in real code.
- Hands-on experience with SAST, SCA, and secret-scanning tooling (e.g., Semgrep, CodeQL, Snyk, Trivy, Grype, gitleaks).
- Demonstrated AI-forward engineering using AI tooling (e.g., Claude Code, Codex, Cursor, or custom LLM integrations).
- Working knowledge of AWS and Kubernetes.
Conditions
- Salary range: $5,000 - $9,500 per month (Gross in USD).
- Fully remote role.