security engineer in fintech

Sezzle; United States; À distance; USD 120 000 - 180 000; Plein temps

Résumé du poste

Sezzle ищет опытного специалиста по кибербезопасности для развития SIEM/XDR и защиты облачных сред. Вы будете проектировать детектирования, настраивать правила и расследовать инциденты в AWS и Kubernetes, работая с логами и аудитами.

Обязанности включают активное проведение hunt-подхода, управление уязвимостями и обеспечение соответствия PCI DSS/SOC 2, а также внедрение автоматизации и использования AI в операциях безопасности.

Qualifications

• 6+ лет опыта в области безопасности, ПО или инфраструктурной инженерии
• Опыт работы с SIEM-платформами (Wazuh, Splunk, ELK)
• Практический опыт управления уязвимостями (сканирование, triage, исправления)
• Знание AWS, Linux и Kubernetes, архитектура безопасности
• Опыт оценки логирования и влияния систем на безопасность; соответствие PCI DSS и SOC 2

Responsabilités

• Разработка и настройка правил обнаружения, уменьшение уровня ложных тревог
• Расследование инцидентов в облаке и приложениях, анализ причин
• Проведение hunt-подходов и создание повторяемых рабочих процессов
• Управление уязвимостями, координация исправлений с командами
• Обеспечение соответствия PCI DSS/SOC 2 через аудит и сбор доказательств
• Использование AI и автоматизации для улучшения операций безопасности
• Участие в дежурстве (on-call) для обнаружения и реагирования

Connaissances

Detection engineering

Threat hunting

Incident response

Log analysis

Cloud security

Outils

Wazuh

Splunk

ELK

Snyk

Trivy

Grype

Description du poste

Описание

Sezzle provides interest-free installment plans that make shopping more accessible. Its services combine payments with a shopping experience designed to increase merchant conversions and order values.

Задачи

Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry Extend audit and attribution coverage across Kubernetes audit logs, database audit logging, SSO, and access-path telemetry, with retention aligned to compliance requirements Investigate and respond to security incidents across cloud infrastructure and applications, perform root cause analysis, and drive long-term fixes Run proactive threat hunts across cloud and identity planes and build repeatable agentic hunting workflows Operate vulnerability management across infrastructure, platforms, and applications, including internal scans, dependency analysis, and external findings; validate true positives and drive remediation with engineering teams Triage and validate external security findings, including bug bounty reports, and coordinate remediation Contribute to threat modeling and security design reviews, assessing detection, logging, and incident-response implications of new systems Apply AWS and Kubernetes judgment to secure operated systems and advise owning teams on remediation Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements, producing audit evidence through logging and detection work Develop and implement automation, including AI, to improve security operations, detection, and response Participate in the on-call rotation for detection and response and owned services

Требования

6+ Years of experience in security, software, or infrastructure engineering, securing cloud-based production systems Experience with SIEM platforms such as Wazuh, Splunk, or ELK for detection engineering, monitoring, and incident response Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows Hands-on vulnerability management experience, including scanning, triage and validation of scanner and bug-bounty findings, remediation coordination, and verification Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture and operational best practices Ability to investigate issues using logs, cloud tooling, and system-level data Experience assessing detection and logging implications of new systems in design reviews Knowledge of common security vulnerabilities and mitigation strategies, such as OWASP and SANS Working knowledge of compliance frameworks such as PCI DSS and SOC 2, particularly logging, monitoring, and evidence expectations Actively use AI tooling in current work and have practice-based views on where it helps and where it does not Demonstrate an investigative approach, treat attribution as an engineering deliverable, use automation to reduce repetitive work, balance security standards with business needs, maintain high standards, act decisively, earn trust, challenge decisions respectfully, commit to decisions, and deliver results Будет плюсом: building AI-assisted workflows adopted by others, familiarity with log-based detection and telemetry pipelines, internal penetration testing or adversarial exercises, cloud-native security controls including IAM, network segmentation, and container security, container and dependency security tools such as Snyk, Trivy, and Grype, aligning technical security work with regulatory expectations, fintech, payments, or other regulated-environment experience

Условия

On-call rotation for detection and response and the services owned