Senior Software Engineer, Security Platform

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible.

The salary range for this role is $5,000 - $9,500 per month (Gross in USD).

Compensation:

For this senior role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This is a fully remote role.

About the Role:

We are seeking a hands-on Senior Software Engineer, Security Platform, to build and own the platform the security team runs on: the services that discover, scan, triage and route security findings, the event-driven bus that connects them, and the CI security gates every team's pipeline runs through.

This is a development role on the security team, not a security-analyst role. You will report to the Director of Information Security.

What You'll Do:

• Design, build, and operate security engineering services primarily in Golang and Python, on AWS and Kubernetes.
• Own the event-driven platform between the security services: the NATS bus, its contracts and consumers, delivery guarantees and observability.
• Integrate the platform end-to-end: scanners, finding system-of-record, tickets, and metrics.
• Own delivery of the security gates (SAST, SCA, secret detection, container and IaC scanning), including scanner selection, tuning, and rollout tooling.
• Build agentic security workflows: CI review agents, automated finding triage and verification, and remediation helpers.
• Build the triage-to-remediation automation, including reproduction context, fix guidance, and routing to owning teams.
• Participate in threat modeling and secure design reviews.
• Participate in the on-call rotation for the services you own.

What We Look For:

• 6+ years of professional software engineering experience, including significant backend experience.
• Deployed significant changes to a production application in the past 30 days.
• Strong proficiency in Golang, plus working proficiency in Python.
• Hands-on experience building and operating event-driven or message-based systems (NATS, Kafka, or similar).
• Hands-on experience building and operating CI/CD pipeline tooling; GitLab CI at fleet scale is a strong plus.
• Hands-on web application security knowledge, including the OWASP Top 10.
• Hands-on experience with SAST, SCA, and secret-scanning tooling (e.g., Semgrep, CodeQL, Snyk, Trivy, Grype, gitleaks).
• Demonstrated AI-forward engineering, with active use of AI tooling in development work and agentic workflows adopted by other engineers.
• Working knowledge of AWS and Kubernetes.

Preferred Knowledge and Skills:

• Experience in fintech, payments, BNPL, or consumer lending.
• Working knowledge of PCI DSS and SOC 2.
• Software supply-chain integrity: SBOM pipelines, dependency governance, artifact signing and provenance (Sigstore, SLSA).
• Familiarity with policy-as-code and admission control (OPA, Kyverno, conftest).
• Exposure to bug bounty or external vulnerability report triage.
• Experience with threat modeling at a system level.

About You:

• You measure yourself by other teams' code, and you build enforcement so engineers want to keep it.
• You have relentlessly high standards and make sure defects do not get sent down the line.
• You are not bound by convention and enjoy developing new ways to do things.
• You need action, value calculated risk-taking, and earn trust through candid, respectful communication.
• You deliver results and never settle.

Sezzle's Technology Stack:

• Languages: Golang, TypeScript, Python
• Frontend: TypeScript, React and React Native
• Backend: Golang
• Database: MySQL, Postgres, Elasticsearch
• DevOps & Cloud: AWS, Kubernetes
• Version Control: Git
• CI/CD: GitLab
• Testing: Developer and AI-driven, focused on automated end-to-end, integration, and unit tests
• Open Source: Sezzle is focused on using open source, and builds what it can before buying.