Senior Security Engineer, Detection & Response

The salary range for this role is $5,000 - $9,500 per month (Gross in USD)

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values.

As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!

About the Role:

We are seeking a hands-on, high-impact

Senior Security Engineer, Detection & Response

, to strengthen security operations at Sezzle: detection, incident response, and vulnerability management across our cloud infrastructure and applications.

You will join the team that runs our SIEM and detection capability — from log ingestion and audit coverage to detection rules, alert tuning, and investigation workflows — so that access to sensitive systems is attributable and suspicious activity is caught and attributed by our own detections. You will operate the vulnerability-management loop end-to-end, and when incidents happen, you will lead the investigation and see the long-term fix through.

You should consider yourself a DOer - someone who is comfortable diving into logs, analyzing systems, validating findings, and working end-to-end to get issues resolved.

You will report to the Director of Information Security and work alongside the engineers who own the security platform and network and zero trust — your detection and response work is what proves their controls hold. This role is ideal for someone who thrives in a fast-paced environment and wants to work on real-world security problems at scale. At Sezzle, AI-assisted engineering is a standard part of how we work.

In this role you will use and build agentic workflows for alert triage, investigation, and threat hunting that multiply what the team can cover.

What You’ll Do:

• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Extend audit and attribution coverage across the estate — Kubernetes audit logs, database audit logging, SSO and access-path telemetry — so access to sensitive data is attributable to a person or workload, with retention aligned to compliance requirements
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and driving long-term fixes
• Run proactive threat hunts across cloud and identity planes, building agentic hunting workflows that make hunts repeatable
• Operate vulnerability management across infrastructure, platforms, and applications - including internal scans, dependency analysis, and external findings, validating true positives and driving remediation with engineering teams
• Triage and validate external security findings (including bug bounty reports), distinguishing true positives and coordinating remediation
• Contribute to threat modeling and security design reviews for the detection, logging, and incident-response implications of new systems