Senior Security Platform Engineer — Remote (Go/Python)

Sezzle; United States; Remote; USD 56,000 - 106,000; Full time

Job summary

Sezzle is seeking a hands-on Senior Software Engineer, Security Platform, to build and own the platform the security team runs on: services that discover, scan, triage and route security findings, and an event-driven bus that connects them.

This role focuses on Go and Python on Kubernetes and AWS, with CI security gates, ensuring fast, low-noise, reliable delivery without slowing engineers.

Qualifications

• 6+ years of professional software engineering experience, with backend focus.
• Deployed significant changes to a production app in the last 30 days.
• Proficient in Golang; working knowledge of Python.
• Experience with event-driven or message-based systems (NATS, Kafka).
• Experience with CI/CD tooling, GitLab at fleet scale is a plus.
• Security knowledge: OWASP Top 10 in real code.
• Experience with SAST, SCA, and secret scanning tools (Semgrep, CodeQL, Snyk, Trivy, Grype, gitleaks).
• AI-forward engineering experience using AI tools in development today.

Responsibilities

• Design, build, and operate security engineering services primarily in Golang and Python on AWS and Kubernetes.
• Own the event-driven platform between security services (NATS bus, contracts, observability).
• Integrate the platform end-to-end: scanners → finding system → tickets → metrics.
• Own delivery of security gates (SAST, SCA, secret detection, container and IaC scanning).
• Build agentic security workflows: CI review agents and automated triage.
• Develop triage-to-remediation automation with context, guidance, and routing to teams.
• Participate in threat modeling and secure design reviews for services and pipelines.

Skills

Golang

Python

Event-driven systems

AWS

Tools

NATS

Kubernetes

GitLab

Semgrep

CodeQL

Job description

Sezzle is seeking a hands-on Senior Software Engineer, Security Platform, to build and own the platform the security team runs on: services that discover, scan, triage and route security findings, and an event-driven bus that connects them.

This role focuses on Go and Python on Kubernetes and AWS, with CI security gates, ensuring fast, low-noise, reliable delivery without slowing engineers.