security engineer in fintech

Sezzle provides interest-free installment plans that make shopping more accessible. Its services combine payments with a shopping experience designed to increase merchant conversions and order values.

• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Extend audit and attribution coverage across Kubernetes audit logs, database audit logging, SSO, and access-path telemetry, with retention aligned to compliance requirements
• Investigate and respond to security incidents across cloud infrastructure and applications, perform root cause analysis, and drive long-term fixes
• Run proactive threat hunts across cloud and identity planes and build repeatable agentic hunting workflows
• Operate vulnerability management across infrastructure, platforms, and applications, including internal scans, dependency analysis, and external findings; validate true positives and drive remediation with engineering teams
• Triage and validate external security findings, including bug bounty reports, and coordinate remediation
• Contribute to threat modeling and security design reviews, assessing detection, logging, and incident-response implications of new systems
• Apply AWS and Kubernetes judgment to secure operated systems and advise owning teams on remediation
• Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements, producing audit evidence through logging and detection work
• Develop and implement automation, including AI, to improve security operations, detection, and response
• Participate in the on-call rotation for detection and response and owned services

• 6+ Years of experience in security, software, or infrastructure engineering, securing cloud-based production systems
• Experience with SIEM platforms such as Wazuh, Splunk, or ELK for detection engineering, monitoring, and incident response
• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Hands-on vulnerability management experience, including scanning, triage and validation of scanner and bug-bounty findings, remediation coordination, and verification
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture and operational best practices
• Ability to investigate issues using logs, cloud tooling, and system-level data
• Experience assessing detection and logging implications of new systems in design reviews
• Knowledge of common security vulnerabilities and mitigation strategies, such as OWASP and SANS
• Working knowledge of compliance frameworks such as PCI DSS and SOC 2, particularly logging, monitoring, and evidence expectations
• Actively use AI tooling in current work and have practice-based views on where it helps and where it does not
• Demonstrate an investigative approach, treat attribution as an engineering deliverable, use automation to reduce repetitive work, balance security standards with business needs, maintain high standards, act decisively, earn trust, challenge decisions respectfully, commit to decisions, and deliver results
• Будет плюсом: building AI-assisted workflows adopted by others, familiarity with log-based detection and telemetry pipelines, internal penetration testing or adversarial exercises, cloud-native security controls including IAM, network segmentation, and container security, container and dependency security tools such as Snyk, Trivy, and Grype, aligning technical security work with regulatory expectations, fintech, payments, or other regulated-environment experience

• On-call rotation for detection and response and the services owned