{"id":2491274,"url":"https://alion.io/job/sezzle-senior-software-engineer-security-platform-3","title":"Senior Software Engineer, Security Platform","company":{"id":5674,"name":"Sezzle","domain":"sezzle.com","url":"https://alion.io/company/sezzle","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":93,"open_postings":120,"ghost_share":0,"stale_share":0.283,"repost_share":0,"time_to_fill_p50_days":58,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["IN","AR","BR","MX","TR","AG","AW","BS","BB","BZ","BM","BO","VG","BQ","KY","CL","CR","CW","DM","DO","EC","SV","FK","GF","GD","GP","GT","GY","HT","HN","JM","MQ","MS","NI","PA","PY","PE","PR","KN","LC"],"hiring_countries_total":47,"salary":{"min":5000,"max":9500,"currency":"USD","period":"month","gross":true,"usd_annual":114000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Apache Kafka","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"CodeQL","optional":false},{"name":"Cursor","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"Gitleaks","optional":false},{"name":"Go","optional":false},{"name":"Grype","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"LLM","optional":false},{"name":"NATS","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Semgrep","optional":false},{"name":"Sigstore","optional":false},{"name":"SLSA","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"Zero Trust","optional":false},{"name":"ElasticSearch","optional":true},{"name":"Git","optional":true},{"name":"JavaScript","optional":true},{"name":"MySQL","optional":true},{"name":"PostgreSQL","optional":true},{"name":"React Native","optional":true},{"name":"React.js","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-10-14T01:10:07Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-17T16:53:58Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"The salary range for this role is $5,000 - $9,500 per month (Gross in USD)\nAbout Sezzle:\nWith a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values. As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!\nCompensation:\nFor this senior role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This range acknowledges the strong expertise and significant contributions expected at this level. This is a fully remote role. We believe the best engineers can do world-class work from anywhere, and we hire accordingly. Work from where you do your best work.\nAbout the Role: \nWe are seeking a hands-on Senior Software Engineer, Security Platform, to build and own the platform the security team runs on: the services that discover, scan, triage and route security findings, the event-driven bus that connects them, and the CI security gates every team's pipeline runs through.\nThis is a development role on the security team, not a security-analyst role. Most of your time goes into designing, building and operating services in Go and Python on Kubernetes: new services where the programme needs them, the existing fleet where it has grown faster than its upkeep, and the NATS-based event platform that moves findings, inventory changes and notifications between them. The security gates in our GitLab CI (SAST, SCA, secret detection, container and IaC scanning) and the agentic triage and review workflows are part of that platform, not the whole of it. Your job is to make these systems fast, low-noise, and reliable enough to be trusted by default without slowing delivery. \nYou will report to the Director of Information Security and work alongside the engineers who own detection and response and network and zero trust - your platform is what their work composes with.\nAt Sezzle, AI-assisted engineering is a standard part of how we build. In this role you will build reusable agentic workflows (Claude Code skills, CI review agents, automated triage and verification) that multiply what the team can cover, and hold that review discipline in the platform code you own.\nWhat You’ll Do: \nDesign, build, and operate security engineering services primarily in Golang and Python, on AWS and Kubernetes: new services where the programme needs them, and the upkeep, hardening and retirement of the existing ones.\nOwn the event-driven platform between the security services: the NATS bus, its contracts and consumers, delivery guarantees and observability - so a finding, an inventory change or an alert reaches every service that acts on it.\nIntegrate the platform end-to-end: scanners → finding system-of-record → tickets → metrics, so remediation state is visible and exam evidence is a by-product of engineering. \nOwn delivery of the security gates - SAST, SCA, secret detection, container and IaC scanning: scanner selection and tuning, suppression workflow mechanics, false-positive burn-down, and the rollout tooling that takes a gate from advisory reporting to enforcing without blocking delivery. \nBuild agentic security workflows: CI review agents, automated finding triage and verification, remediation helpers - tooling other engineers actually adopt. \nBuild the triage-to-remediation automation: validate true positives by hand enough to prove the tooling right, then automate the loop - reproduction context, fix guidance, and routing to the owning teams and to vulnerability-management operations. \nParticipate in threat modeling and secure design reviews for the services you build and the pipelines you own. \nParticipate in the on-call rotation for the services you own.\nWhat We Look For: \n6+ years of professional software engineering experience, including significant backend experience. \n\nDeployed significant changes to a production application in the past 30 days. \n\nStrong proficiency in Golang, plus working proficiency in Python. \n\nHands-on experience building and operating event-driven or message-based systems (NATS, Kafka, or similar): contracts, idempotent consumers, replay, back-pressure. \n\nHands-on experience building and operating CI/CD pipeline tooling - jobs, shared templates, runners - GitLab CI at fleet scale is a strong plus. \n\nHands-on web application security knowledge: the OWASP Top 10 in real code - able to find these issues, fix them yourself, and encode the detection so they stop recurring. \n\nHands-on experience with SAST, SCA, and secret-scanning tooling (e.g., Semgrep, CodeQL, Snyk, Trivy, Grype, gitleaks), including tuning them to a signal-to-noise ratio developers will tolerate. \nDemonstrated AI-forward engineering: you actively use AI tooling (e.g., Claude Code, Codex, Cursor, or custom LLM integrations) in your development work today, have opinions grounded in practice about where it helps and where it doesn't, and have built agentic workflows that other engineers adopted.\nWorking knowledge of AWS and Kubernetes as deployment targets for the services you build.\nPreferred Knowledge and Skills:\nExperience in fintech, payments, BNPL, or consumer lending, especially with systems in cardholder-data or regulated scope. \nWorking knowledge of PCI DSS and SOC 2 as they apply to software development and change management - the platform you build is what produces that evidence. \nSoftware supply-chain integrity: SBOM pipelines, dependency governance, artifact signing and provenance (Sigstore, SLSA). \nFamiliarity with policy-as-code and admission control (OPA, Kyverno, conftest) - your gates compose with the cluster's runtime policy-enforcement layer. \nExposure to bug bounty or external vulnerability report triage - enough to know what the automation you build has to get right. \nExperience with threat modeling at a system level.\nAbout You: \nYou measure yourself by other teams' code - a fix you shipped is good; a vulnerability class that stopped appearing across the fleet is better. \nYou'd rather ship a gate than publish a policy - you know that enforcement changes behavior and documents do not, and you build the enforcement so well that engineers want to keep it. \nYou have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixed. \nYou're not bound by convention - your success-and much of the fun-lies in developing new ways to do things. \nYou need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-taking.\nYou earn trust - you listen attentively, speak candidly, and treat others respectfully. \nYou have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit wholly.\n\nYou deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settle.\n\nSezzle’s Technology Stack:\nLanguages: Golang, Typescript, Python\nFrontend: Typescript - React and React Native\nBackend: Golang\nDatabase: MySQL, Postgres, Elasticsearch\nDevOps & Cloud: AWS, Kubernetes\nVersion Control: Git\nCI/CD: Gitlab\nTesting: Developer and AI-driven, focus on automated end-to-end, integration, and unit tests\nOpen Source: Sezzle is focused on using open source, and we build what we can before buying!\nWhat Makes Working at Sezzle Awesome? \nAt Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box thinkers, and determined innovators; we are skilled musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers. We believe in surrounding ourselves with not only the best and the brightest individuals, but those that are unique and purpose-driven in all that they do. Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.\n#Li-remote #Full-time","description_format":"text","description_chars":8999,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"},{"name":"Argentina","iso":"AR","kind":"region"},{"name":"Brazil","iso":"BR","kind":"region"},{"name":"Colombia","iso":null,"kind":"country"},{"name":"Mexico","iso":"MX","kind":"region"},{"name":"Turkey","iso":"TR","kind":"country"},{"name":"Anguilla","iso":null,"kind":"region"},{"name":"Antigua and Barbuda","iso":"AG","kind":"region"},{"name":"Aruba","iso":"AW","kind":"region"},{"name":"Bahamas","iso":"BS","kind":"region"},{"name":"Barbados","iso":"BB","kind":"region"},{"name":"Belize","iso":"BZ","kind":"region"},{"name":"Bermuda","iso":"BM","kind":"region"},{"name":"Bolivia","iso":"BO","kind":"region"},{"name":"British Virgin Islands","iso":"VG","kind":"region"},{"name":"Bonaire, Sint Eustatius and Saba","iso":"BQ","kind":"region"},{"name":"Cayman Islands","iso":"KY","kind":"region"},{"name":"Chile","iso":"CL","kind":"region"},{"name":"Costa Rica","iso":"CR","kind":"region"},{"name":"Curaçao","iso":"CW","kind":"region"},{"name":"Dominica","iso":"DM","kind":"region"},{"name":"Dominican Republic","iso":"DO","kind":"region"},{"name":"Ecuador","iso":"EC","kind":"region"},{"name":"El Salvador","iso":"SV","kind":"region"},{"name":"Falkland Islands","iso":"FK","kind":"region"},{"name":"French Guiana","iso":"GF","kind":"region"},{"name":"Grenada","iso":"GD","kind":"region"},{"name":"Guadeloupe","iso":"GP","kind":"region"},{"name":"Guatemala","iso":"GT","kind":"region"},{"name":"Guyana","iso":"GY","kind":"region"},{"name":"Haiti","iso":"HT","kind":"region"},{"name":"Honduras","iso":"HN","kind":"region"},{"name":"Jamaica","iso":"JM","kind":"region"},{"name":"Martinique","iso":"MQ","kind":"region"},{"name":"Montserrat","iso":"MS","kind":"region"},{"name":"Nicaragua","iso":"NI","kind":"region"},{"name":"Panama","iso":"PA","kind":"region"},{"name":"Paraguay","iso":"PY","kind":"region"},{"name":"Peru","iso":"PE","kind":"region"},{"name":"Puerto Rico","iso":"PR","kind":"region"},{"name":"Saint Kitts and Nevis","iso":"KN","kind":"region"},{"name":"Saint Lucia","iso":"LC","kind":"region"},{"name":"Saint Vincent and the Grenadines","iso":null,"kind":"region"},{"name":"Saint-Pierre and Miquelon","iso":"PM","kind":"region"},{"name":"Sint Maarten","iso":"SX","kind":"region"},{"name":"Suriname","iso":"SR","kind":"region"},{"name":"Trinidad and Tobago","iso":"TT","kind":"region"},{"name":"Turks and Caicos Islands","iso":"TC","kind":"region"},{"name":"Uruguay","iso":"UY","kind":"region"},{"name":"United States Virgin Islands","iso":"VI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-10-14T02:38:59Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":58,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":114000,"is_top_pay":false},"html_url":"https://alion.io/job/sezzle-senior-software-engineer-security-platform-3","json_url":"https://alion.io/job/sezzle-senior-software-engineer-security-platform-3.json","meta":{"generated_at":"2026-10-17T17:05:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23506,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5674},"rest":"https://alion.io/mcp/rest/get_company?id=5674"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsezzle-senior-software-engineer-security-platform-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsezzle-senior-software-engineer-security-platform-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsezzle-senior-software-engineer-security-platform-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sezzle-senior-software-engineer-security-platform-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsezzle-senior-software-engineer-security-platform-3"}]}