Senior Security Infrastructure Engineer

About the role

Sezzle is looking for a hands‑on Senior Security Infrastructure Engineer to elevate the company’s security posture across cloud infrastructure, applications, and developer workflows. You will own risk identification, incident response, and security automation while collaborating closely with engineering teams.

Key responsibilities

• Lead vulnerability management across infrastructure, platforms and applications, including scanning, triage, validation and remediation coordination.
• Build, operate and mature SIEM/XDR capabilities – log ingestion, detection rule development, alert tuning and investigation workflows.
• Investigate and respond to security incidents, perform root‑cause analysis and drive long‑term fixes.
• Design detection strategies for suspicious activity and data exfiltration using telemetry from applications and databases.
• Drive threat‑modeling exercises and security design reviews to identify risks early.
• Apply deep AWS and Kubernetes expertise to secure and harden cloud environments at scale.
• Lead CI/CD hardening initiatives and supply‑chain risk reduction for containers and dependencies.
• Implement and maintain security controls aligned with PCI DSS, SOC 2 and other compliance frameworks.
• Develop automation (including AI tools such as Claude) to improve efficiency in security operations.

Required profile

• 6+ years of experience in security, software or infrastructure engineering with hands‑on cloud production systems.
• Proven experience in vulnerability management, SIEM platforms and incident response.
• Strong knowledge of AWS, Linux and Kubernetes security architecture and hardening.
• Experience with container and dependency security tools (e.g., Snyk, Trivy, Grype).
• Familiarity with compliance frameworks such as PCI DSS and SOC 2.
• Comfortable leveraging large language model tools (Claude or equivalent) to boost productivity.

Required skills

• AWS
• Kubernetes
• Linux
• SIEM platforms (Wazuh, Splunk, ELK)
• Vulnerability management tools
• Container security tools (Snyk, Trivy, Grype)
• CI/CD pipeline hardening
• Threat modeling
• PCI DSS compliance
• SOC 2 compliance
• Claude (or equivalent LLM) for automation