Senior Security Engineer, Detection & Response

Career Tools

About This Role

Sezzle is seeking a Senior Security Engineer, Detection & Response to strengthen security operations across its cloud infrastructure and applications. Sezzle operates a financial technology platform offering interest-free installment plans that help consumers make accessible purchases while driving merchant sales. In this hands-on position, the engineer will manage SIEM and detection systems, handle vulnerability management end-to-end, lead incident investigations, and run proactive threat hunts. The role involves building agentic workflows…

Job Description

Responsibilities

• Build, operate, and mature SIEM and XDR capabilities including log ingestion, detection rule development, alert tuning, and investigation workflows
• Design detection strategies for suspicious activity such as data exfiltration patterns using application and database telemetry
• Extend audit and attribution coverage across Kubernetes, databases, and single sign-on access paths
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and implementing permanent fixes
• Run proactive threat hunts across cloud and identity planes by building repeatable agentic hunting workflows
• Operate vulnerability management across infrastructure, platforms, and applications, including internal scans, dependency analysis, and external findings
• Triage and validate external security findings and bug bounty reports
• Contribute to threat modeling and security design reviews for new systems
• Develop and implement automation and AI solutions to improve operational efficiency in detection and response
• Participate in the on-call rotation for detection, response, and owned services

Requirements

• At least 6 years of professional experience in security, software, or infrastructure engineering
• Hands-on experience securing cloud-based production systems and handling real-world security challenges
• Experience working with SIEM platforms like Wazuh, Splunk, or ELK for detection engineering, monitoring, and incident response
• Experience designing and tuning detection rules to reduce alert noise and improve investigation workflows
• Strong practical experience in vulnerability management, scanning, triage, validation, and remediation coordination
• Solid knowledge of AWS, Linux, and Kubernetes infrastructure architecture and operational best practices
• Familiarity with common security vulnerabilities and mitigation frameworks such as OWASP and SANS
• Working knowledge of compliance frameworks including PCI DSS and SOC 2
• Demonstrated active use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations in daily work

Qualifications

• Experience building AI-assisted workflows for triage, enrichment, or threat hunting that were adopted by others
• Familiarity with log-based detection, telemetry pipelines, and security analytics use cases
• Experience with internal penetration testing or adversarial exercises
• Understanding of cloud-native security controls such as IAM, network segmentation, and container security
• Experience operating container and dependency security tools like Snyk, Trivy, or Grype
• Background aligning technical security work with regulatory and compliance expectations
• Prior experience working in fintech, payments, or other regulated environments

Core Skills

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Sample Interview Questions

AI-generated questions tailored to this specific role — a preview of the full practice set.