The salary range for this role is $5,000 - $9,500 per month (Gross in USD)

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values. As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!

Compensation:

For this principal development role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This range acknowledges the extensive expertise, leadership capabilities, and significant contributions expected at this level, offering a competitive salary to reflect the value of advanced skills and experience

About the Role: 

We are seeking a hands-on, high-impact Senior Security Infrastructure Engineer to help strengthen Sezzle’s security posture across cloud infrastructure, applications, and developer workflows. This role is ideal for someone who thrives in a fast-paced environment and wants to work on real-world security problems at scale.

As a Senior Security Infrastructure Engineer, you will have a high degree of ownership and autonomy to identify risks, investigate issues, and drive meaningful security improvements across our systems. You will work across vulnerability management, detection engineering, supply chain security, and incident response - partnering closely with engineering teams to ensure security is practical, effective, and embedded into how we build and operate systems. You should consider yourself a DOer - someone who is comfortable diving into logs, analyzing systems, validating findings, and working end-to-end to get issues resolved. We value engineers who bring strong technical depth, good judgment, and the ability to turn security insights into actionable outcomes.

This role offers the opportunity to shape and scale security capabilities, including detection systems, supply chain risk controls, and security automation. With the support of modern tooling (including AI where appropriate), you will play a key role in improving efficiency, visibility, and resilience across the organization. This role combines hands-on security operations with exploratory and design work. You will spend significant time investigating and resolving real-world issues, while also researching, evaluating, and building new security capabilities across areas like detection, supply chain security, and data protection.

What You’ll Do: 

• Lead and operate vulnerability management across infrastructure, platforms, and applications - including internal scans, dependency analysis, and external findings, validating true positives and driving remediation with engineering teams
• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and driving long-term fixes
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Lead and contribute to threat modeling exercises and security design reviews to identify risks early and strengthen architecture
• Apply deep expertise in AWS and Kubernetes to design, secure, and improve resilient and secure cloud infrastructure at scale
• Drive infrastructure and CI/CD hardening initiatives, with a focus on reducing software and container supply chain risk
• Lead efforts to implement and improve dependency and container supply chain risk detection systems and controls
• Partner closely with engineering teams to remediate vulnerabilities and improve secure development and deployment practices
• Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop and implement automation (including AI where appropriate) to improve efficiency in security operations, detection, and response
• Triage and validate external security findings, distinguishing true positives and coordinating remediation

What We Look For: 

• 6+ years of experience in security, software, or infrastructure engineering, with hands-on experience securing cloud-based production systems and working with real-world security challenges
• Experience contributing to threat modeling and security design reviews for modern systems
• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification
• Experience working with SIEM platforms (e.g., Wazuh, Splunk, ELK) for detection engineering, monitoring, and incident response
• Practical experience triaging findings from vulnerability scanners and bug bounty programs
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture, hardening, and operational best practices
• Experience improving infrastructure security, including CI/CD hardening and mitigating software supply chain risks
• Experience with container and dependency security tools (e.g., Snyk, Trivy, Grype, etc.)
• Ability to investigate issues directly using logs, cloud tooling, and system-level data
• Knowledge of common security vulnerabilities and mitigation strategies (OWASP, SANS, etc.)
• Working knowledge of compliance frameworks such as PCI DSS and SOC 2

Preferred Knowledge and Skills:

• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong understanding of cloud-native security controls, including IAM, network segmentation, and container security
• Familiarity with log-based detection, telemetry pipelines, and security analytics use cases
• Experience designing secure CI/CD workflows that reduce exposure to vulnerable dependencies and untrusted artifacts
• Ability to assess application and infrastructure risk and translate findings into actionable improvements
• Experience aligning technical security work with regulatory and compliance expectations
• Experience using automation and AI to reduce manual effort and improve consistency at scale

About You: 

• You think proactively about security and work to address risk early through clear design feedback and practical engineering solutions
• You bring strong cloud and infrastructure judgment, especially in AWS and Kubernetes environments
• You raise the bar on hardening and operational discipline, especially in CI/CD and supply chain security practices
• You approach security monitoring with an investigator’s mindset and can turn telemetry into meaningful detection and response outcomes
• You are excited to use automation and emerging technologies (including AI) to automate repetitive security work and improve team effectiveness
• You balance strong security standards with business needs and can support privacy and compliance requirements in a practical, scalable way
• You have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixed.
• You’re not bound by convention - your success—and much of the fun—lies in developing new ways to do things
• You need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-taking.
• You earn trust - you listen attentively, speak candidly, and treat others respectfully.
• You have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You have conviction and are tenacious. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit wholly.
• You deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settle.

Sezzle’s Technology Stack:

• Languages: Golang, Typescript, Python
• Frontend: Typescript - React and React Native
• Backend: Golang
• Database: MySQL, Postgres, Elasticsearch
• DevOps & Cloud: AWS, Kubernetes
• Version Control: Git
• CI/CD: Gitlab
• Testing: Developer and AI-driven, focus on automated end-to-end, integration, and unit tests
• Open Source: Sezzle is focused on using open source, and we build what we can before buying!

What Makes Working at Sezzle Awesome? 

At Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box thinkers, and determined innovators; we are skilled musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers. We believe in surrounding ourselves with not only the best and the brightest individuals, but those that are unique and purpose-driven in all that they do. Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.

#Li-remote #full-time

The salary range for this role is $5,000 - $9,500 per month (Gross in USD)

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values. As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!

Compensation:

For this principal development role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This range acknowledges the extensive expertise, leadership capabilities, and significant contributions expected at this level, offering a competitive salary to reflect the value of advanced skills and experience

About the Role: 

We are seeking a hands-on, high-impact Senior Security Infrastructure Engineer to help strengthen Sezzle’s security posture across cloud infrastructure, applications, and developer workflows. This role is ideal for someone who thrives in a fast-paced environment and wants to work on real-world security problems at scale.

As a Senior Security Infrastructure Engineer, you will have a high degree of ownership and autonomy to identify risks, investigate issues, and drive meaningful security improvements across our systems. You will work across vulnerability management, detection engineering, supply chain security, and incident response - partnering closely with engineering teams to ensure security is practical, effective, and embedded into how we build and operate systems. You should consider yourself a DOer - someone who is comfortable diving into logs, analyzing systems, validating findings, and working end-to-end to get issues resolved. We value engineers who bring strong technical depth, good judgment, and the ability to turn security insights into actionable outcomes.

This role offers the opportunity to shape and scale security capabilities, including detection systems, supply chain risk controls, and security automation. With the support of modern tooling (including AI where appropriate), you will play a key role in improving efficiency, visibility, and resilience across the organization. This role combines hands-on security operations with exploratory and design work. You will spend significant time investigating and resolving real-world issues, while also researching, evaluating, and building new security capabilities across areas like detection, supply chain security, and data protection.

What You’ll Do: 

• Lead and operate vulnerability management across infrastructure, platforms, and applications - including internal scans, dependency analysis, and external findings, validating true positives and driving remediation with engineering teams
• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and driving long-term fixes
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Lead and contribute to threat modeling exercises and security design reviews to identify risks early and strengthen architecture
• Apply deep expertise in AWS and Kubernetes to design, secure, and improve resilient and secure cloud infrastructure at scale
• Drive infrastructure and CI/CD hardening initiatives, with a focus on reducing software and container supply chain risk
• Lead efforts to implement and improve dependency and container supply chain risk detection systems and controls
• Partner closely with engineering teams to remediate vulnerabilities and improve secure development and deployment practices
• Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop and implement automation (including AI where appropriate) to improve efficiency in security operations, detection, and response
• Triage and validate external security findings, distinguishing true positives and coordinating remediation

What We Look For: 

• 6+ years of experience in security, software, or infrastructure engineering, with hands-on experience securing cloud-based production systems and working with real-world security challenges
• Experience contributing to threat modeling and security design reviews for modern systems
• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification
• Experience working with SIEM platforms (e.g., Wazuh, Splunk, ELK) for detection engineering, monitoring, and incident response
• Practical experience triaging findings from vulnerability scanners and bug bounty programs
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture, hardening, and operational best practices
• Experience improving infrastructure security, including CI/CD hardening and mitigating software supply chain risks
• Experience with container and dependency security tools (e.g., Snyk, Trivy, Grype, etc.)
• Ability to investigate issues directly using logs, cloud tooling, and system-level data
• Knowledge of common security vulnerabilities and mitigation strategies (OWASP, SANS, etc.)
• Working knowledge of compliance frameworks such as PCI DSS and SOC 2

Preferred Knowledge and Skills:

• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong understanding of cloud-native security controls, including IAM, network segmentation, and container security
• Familiarity with log-based detection, telemetry pipelines, and security analytics use cases
• Experience designing secure CI/CD workflows that reduce exposure to vulnerable dependencies and untrusted artifacts
• Ability to assess application and infrastructure risk and translate findings into actionable improvements
• Experience aligning technical security work with regulatory and compliance expectations
• Experience using automation and AI to reduce manual effort and improve consistency at scale

About You: 

• You think proactively about security and work to address risk early through clear design feedback and practical engineering solutions
• You bring strong cloud and infrastructure judgment, especially in AWS and Kubernetes environments
• You raise the bar on hardening and operational discipline, especially in CI/CD and supply chain security practices
• You approach security monitoring with an investigator’s mindset and can turn telemetry into meaningful detection and response outcomes
• You are excited to use automation and emerging technologies (including AI) to automate repetitive security work and improve team effectiveness
• You balance strong security standards with business needs and can support privacy and compliance requirements in a practical, scalable way
• You have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixed.
• You’re not bound by convention - your success—and much of the fun—lies in developing new ways to do things
• You need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-taking.
• You earn trust - you listen attentively, speak candidly, and treat others respectfully.
• You have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You have conviction and are tenacious. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit wholly.
• You deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settle.

Sezzle’s Technology Stack:

• Languages: Golang, Typescript, Python
• Frontend: Typescript - React and React Native
• Backend: Golang
• Database: MySQL, Postgres, Elasticsearch
• DevOps & Cloud: AWS, Kubernetes
• Version Control: Git
• CI/CD: Gitlab
• Testing: Developer and AI-driven, focus on automated end-to-end, integration, and unit tests
• Open Source: Sezzle is focused on using open source, and we build what we can before buying!

What Makes Working at Sezzle Awesome? 

At Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box thinkers, and determined innovators; we are skilled musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers. We believe in surrounding ourselves with not only the best and the brightest individuals, but those that are unique and purpose-driven in all that they do. Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.

#Li-remote #full-time

The salary range for this role is $5,000 - $9,500 per month (Gross in USD)

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values. As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!

Compensation:

For this principal development role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This range acknowledges the extensive expertise, leadership capabilities, and significant contributions expected at this level, offering a competitive salary to reflect the value of advanced skills and experience

About the Role: 

We are seeking a hands-on, high-impact Senior Security Infrastructure Engineer to help strengthen Sezzle’s security posture across cloud infrastructure, applications, and developer workflows. This role is ideal for someone who thrives in a fast-paced environment and wants to work on real-world security problems at scale.

As a Senior Security Infrastructure Engineer, you will have a high degree of ownership and autonomy to identify risks, investigate issues, and drive meaningful security improvements across our systems. You will work across vulnerability management, detection engineering, supply chain security, and incident response - partnering closely with engineering teams to ensure security is practical, effective, and embedded into how we build and operate systems. You should consider yourself a DOer - someone who is comfortable diving into logs, analyzing systems, validating findings, and working end-to-end to get issues resolved. We value engineers who bring strong technical depth, good judgment, and the ability to turn security insights into actionable outcomes.

This role offers the opportunity to shape and scale security capabilities, including detection systems, supply chain risk controls, and security automation. With the support of modern tooling (including AI where appropriate), you will play a key role in improving efficiency, visibility, and resilience across the organization. This role combines hands-on security operations with exploratory and design work. You will spend significant time investigating and resolving real-world issues, while also researching, evaluating, and building new security capabilities across areas like detection, supply chain security, and data protection.

What You’ll Do: 

• Lead and operate vulnerability management across infrastructure, platforms, and applications - including internal scans, dependency analysis, and external findings, validating true positives and driving remediation with engineering teams
• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and driving long-term fixes
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Lead and contribute to threat modeling exercises and security design reviews to identify risks early and strengthen architecture
• Apply deep expertise in AWS and Kubernetes to design, secure, and improve resilient and secure cloud infrastructure at scale
• Drive infrastructure and CI/CD hardening initiatives, with a focus on reducing software and container supply chain risk
• Lead efforts to implement and improve dependency and container supply chain risk detection systems and controls
• Partner closely with engineering teams to remediate vulnerabilities and improve secure development and deployment practices
• Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop and implement automation (including AI where appropriate) to improve efficiency in security operations, detection, and response
• Triage and validate external security findings, distinguishing true positives and coordinating remediation

What We Look For: 

• 6+ years of experience in security, software, or infrastructure engineering, with hands-on experience securing cloud-based production systems and working with real-world security challenges
• Experience contributing to threat modeling and security design reviews for modern systems
• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification
• Experience working with SIEM platforms (e.g., Wazuh, Splunk, ELK) for detection engineering, monitoring, and incident response
• Practical experience triaging findings from vulnerability scanners and bug bounty programs
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture, hardening, and operational best practices
• Experience improving infrastructure security, including CI/CD hardening and mitigating software supply chain risks
• Experience with container and dependency security tools (e.g., Snyk, Trivy, Grype, etc.)
• Ability to investigate issues directly using logs, cloud tooling, and system-level data
• Knowledge of common security vulnerabilities and mitigation strategies (OWASP, SANS, etc.)
• Working knowledge of compliance frameworks such as PCI DSS and SOC 2

Preferred Knowledge and Skills:

• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong understanding of cloud-native security controls, including IAM, network segmentation, and container security
• Familiarity with log-based detection, telemetry pipelines, and security analytics use cases
• Experience designing secure CI/CD workflows that reduce exposure to vulnerable dependencies and untrusted artifacts
• Ability to assess application and infrastructure risk and translate findings into actionable improvements
• Experience aligning technical security work with regulatory and compliance expectations
• Experience using automation and AI to reduce manual effort and improve consistency at scale

About You: 

• You think proactively about security and work to address risk early through clear design feedback and practical engineering solutions
• You bring strong cloud and infrastructure judgment, especially in AWS and Kubernetes environments
• You raise the bar on hardening and operational discipline, especially in CI/CD and supply chain security practices
• You approach security monitoring with an investigator’s mindset and can turn telemetry into meaningful detection and response outcomes
• You are excited to use automation and emerging technologies (including AI) to automate repetitive security work and improve team effectiveness
• You balance strong security standards with business needs and can support privacy and compliance requirements in a practical, scalable way
• You have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixed.
• You’re not bound by convention - your success—and much of the fun—lies in developing new ways to do things
• You need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-taking.
• You earn trust - you listen attentively, speak candidly, and treat others respectfully.
• You have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You have conviction and are tenacious. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit wholly.
• You deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settle.

Sezzle’s Technology Stack:

• Languages: Golang, Typescript, Python
• Frontend: Typescript - React and React Native
• Backend: Golang
• Database: MySQL, Postgres, Elasticsearch
• DevOps & Cloud: AWS, Kubernetes
• Version Control: Git
• CI/CD: Gitlab
• Testing: Developer and AI-driven, focus on automated end-to-end, integration, and unit tests
• Open Source: Sezzle is focused on using open source, and we build what we can before buying!

What Makes Working at Sezzle Awesome? 

At Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box thinkers, and determined innovators; we are skilled musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers. We believe in surrounding ourselves with not only the best and the brightest individuals, but those that are unique and purpose-driven in all that they do. Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.

#Li-remote #full-time

The salary range for this role is $5,000 - $9,500 per month (Gross in USD)

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values. As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!

Compensation:

For this principal development role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This range acknowledges the extensive expertise, leadership capabilities, and significant contributions expected at this level, offering a competitive salary to reflect the value of advanced skills and experience

About the Role: 

We are seeking a hands-on, high-impact Senior Security Infrastructure Engineer to help strengthen Sezzle’s security posture across cloud infrastructure, applications, and developer workflows. This role is ideal for someone who thrives in a fast-paced environment and wants to work on real-world security problems at scale.

As a Senior Security Infrastructure Engineer, you will have a high degree of ownership and autonomy to identify risks, investigate issues, and drive meaningful security improvements across our systems. You will work across vulnerability management, detection engineering, supply chain security, and incident response - partnering closely with engineering teams to ensure security is practical, effective, and embedded into how we build and operate systems. You should consider yourself a DOer - someone who is comfortable diving into logs, analyzing systems, validating findings, and working end-to-end to get issues resolved. We value engineers who bring strong technical depth, good judgment, and the ability to turn security insights into actionable outcomes.

This role offers the opportunity to shape and scale security capabilities, including detection systems, supply chain risk controls, and security automation. With the support of modern tooling (including AI where appropriate), you will play a key role in improving efficiency, visibility, and resilience across the organization. This role combines hands-on security operations with exploratory and design work. You will spend significant time investigating and resolving real-world issues, while also researching, evaluating, and building new security capabilities across areas like detection, supply chain security, and data protection.

What You’ll Do: 

• Lead and operate vulnerability management across infrastructure, platforms, and applications - including internal scans, dependency analysis, and external findings, validating true positives and driving remediation with engineering teams
• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and driving long-term fixes
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Lead and contribute to threat modeling exercises and security design reviews to identify risks early and strengthen architecture
• Apply deep expertise in AWS and Kubernetes to design, secure, and improve resilient and secure cloud infrastructure at scale
• Drive infrastructure and CI/CD hardening initiatives, with a focus on reducing software and container supply chain risk
• Lead efforts to implement and improve dependency and container supply chain risk detection systems and controls
• Partner closely with engineering teams to remediate vulnerabilities and improve secure development and deployment practices
• Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop and implement automation (including AI where appropriate) to improve efficiency in security operations, detection, and response
• Triage and validate external security findings, distinguishing true positives and coordinating remediation

What We Look For: 

• 6+ years of experience in security, software, or infrastructure engineering, with hands-on experience securing cloud-based production systems and working with real-world security challenges
• Experience contributing to threat modeling and security design reviews for modern systems
• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification
• Experience working with SIEM platforms (e.g., Wazuh, Splunk, ELK) for detection engineering, monitoring, and incident response
• Practical experience triaging findings from vulnerability scanners and bug bounty programs
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture, hardening, and operational best practices
• Experience improving infrastructure security, including CI/CD hardening and mitigating software supply chain risks
• Experience with container and dependency security tools (e.g., Snyk, Trivy, Grype, etc.)
• Ability to investigate issues directly using logs, cloud tooling, and system-level data
• Knowledge of common security vulnerabilities and mitigation strategies (OWASP, SANS, etc.)
• Working knowledge of compliance frameworks such as PCI DSS and SOC 2

Preferred Knowledge and Skills:

• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong understanding of cloud-native security controls, including IAM, network segmentation, and container security
• Familiarity with log-based detection, telemetry pipelines, and security analytics use cases
• Experience designing secure CI/CD workflows that reduce exposure to vulnerable dependencies and untrusted artifacts
• Ability to assess application and infrastructure risk and translate findings into actionable improvements
• Experience aligning technical security work with regulatory and compliance expectations
• Experience using automation and AI to reduce manual effort and improve consistency at scale

About You: 

• You think proactively about security and work to address risk early through clear design feedback and practical engineering solutions
• You bring strong cloud and infrastructure judgment, especially in AWS and Kubernetes environments
• You raise the bar on hardening and operational discipline, especially in CI/CD and supply chain security practices
• You approach security monitoring with an investigator’s mindset and can turn telemetry into meaningful detection and response outcomes
• You are excited to use automation and emerging technologies (including AI) to automate repetitive security work and improve team effectiveness
• You balance strong security standards with business needs and can support privacy and compliance requirements in a practical, scalable way
• You have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixed.
• You’re not bound by convention - your success—and much of the fun—lies in developing new ways to do things
• You need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-taking.
• You earn trust - you listen attentively, speak candidly, and treat others respectfully.
• You have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You have conviction and are tenacious. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit wholly.
• You deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settle.

Sezzle’s Technology Stack:

• Languages: Golang, Typescript, Python
• Frontend: Typescript - React and React Native
• Backend: Golang
• Database: MySQL, Postgres, Elasticsearch
• DevOps & Cloud: AWS, Kubernetes
• Version Control: Git
• CI/CD: Gitlab
• Testing: Developer and AI-driven, focus on automated end-to-end, integration, and unit tests
• Open Source: Sezzle is focused on using open source, and we build what we can before buying!

What Makes Working at Sezzle Awesome? 

At Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box thinkers, and determined innovators; we are skilled musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers. We believe in surrounding ourselves with not only the best and the brightest individuals, but those that are unique and purpose-driven in all that they do. Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.

#Li-remote #full-time

The salary range for this role is $5,000 - $9,500 per month (Gross in USD)

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values. As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!

Compensation:

For this principal development role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This range acknowledges the extensive expertise, leadership capabilities, and significant contributions expected at this level, offering a competitive salary to reflect the value of advanced skills and experience

About the Role: 

We are seeking a hands-on, high-impact Senior Security Infrastructure Engineer to help strengthen Sezzle’s security posture across cloud infrastructure, applications, and developer workflows. This role is ideal for someone who thrives in a fast-paced environment and wants to work on real-world security problems at scale.

As a Senior Security Infrastructure Engineer, you will have a high degree of ownership and autonomy to identify risks, investigate issues, and drive meaningful security improvements across our systems. You will work across vulnerability management, detection engineering, supply chain security, and incident response - partnering closely with engineering teams to ensure security is practical, effective, and embedded into how we build and operate systems. You should consider yourself a DOer - someone who is comfortable diving into logs, analyzing systems, validating findings, and working end-to-end to get issues resolved. We value engineers who bring strong technical depth, good judgment, and the ability to turn security insights into actionable outcomes.

This role offers the opportunity to shape and scale security capabilities, including detection systems, supply chain risk controls, and security automation. With the support of modern tooling (including AI where appropriate), you will play a key role in improving efficiency, visibility, and resilience across the organization. This role combines hands-on security operations with exploratory and design work. You will spend significant time investigating and resolving real-world issues, while also researching, evaluating, and building new security capabilities across areas like detection, supply chain security, and data protection.

What You’ll Do: 

• Lead and operate vulnerability management across infrastructure, platforms, and applications - including internal scans, dependency analysis, and external findings, validating true positives and driving remediation with engineering teams
• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and driving long-term fixes
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Lead and contribute to threat modeling exercises and security design reviews to identify risks early and strengthen architecture
• Apply deep expertise in AWS and Kubernetes to design, secure, and improve resilient and secure cloud infrastructure at scale
• Drive infrastructure and CI/CD hardening initiatives, with a focus on reducing software and container supply chain risk
• Lead efforts to implement and improve dependency and container supply chain risk detection systems and controls
• Partner closely with engineering teams to remediate vulnerabilities and improve secure development and deployment practices
• Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop and implement automation (including AI where appropriate) to improve efficiency in security operations, detection, and response
• Triage and validate external security findings, distinguishing true positives and coordinating remediation

What We Look For: 

• 6+ years of experience in security, software, or infrastructure engineering, with hands-on experience securing cloud-based production systems and working with real-world security challenges
• Experience contributing to threat modeling and security design reviews for modern systems
• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification
• Experience working with SIEM platforms (e.g., Wazuh, Splunk, ELK) for detection engineering, monitoring, and incident response
• Practical experience triaging findings from vulnerability scanners and bug bounty programs
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture, hardening, and operational best practices
• Experience improving infrastructure security, including CI/CD hardening and mitigating software supply chain risks
• Experience with container and dependency security tools (e.g., Snyk, Trivy, Grype, etc.)
• Ability to investigate issues directly using logs, cloud tooling, and system-level data
• Knowledge of common security vulnerabilities and mitigation strategies (OWASP, SANS, etc.)
• Working knowledge of compliance frameworks such as PCI DSS and SOC 2

Preferred Knowledge and Skills:

• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong understanding of cloud-native security controls, including IAM, network segmentation, and container security
• Familiarity with log-based detection, telemetry pipelines, and security analytics use cases
• Experience designing secure CI/CD workflows that reduce exposure to vulnerable dependencies and untrusted artifacts
• Ability to assess application and infrastructure risk and translate findings into actionable improvements
• Experience aligning technical security work with regulatory and compliance expectations
• Experience using automation and AI to reduce manual effort and improve consistency at scale

About You: 

• You think proactively about security and work to address risk early through clear design feedback and practical engineering solutions
• You bring strong cloud and infrastructure judgment, especially in AWS and Kubernetes environments
• You raise the bar on hardening and operational discipline, especially in CI/CD and supply chain security practices
• You approach security monitoring with an investigator’s mindset and can turn telemetry into meaningful detection and response outcomes
• You are excited to use automation and emerging technologies (including AI) to automate repetitive security work and improve team effectiveness
• You balance strong security standards with business needs and can support privacy and compliance requirements in a practical, scalable way
• You have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixed.
• You’re not bound by convention - your success—and much of the fun—lies in developing new ways to do things
• You need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-taking.
• You earn trust - you listen attentively, speak candidly, and treat others respectfully.
• You have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You have conviction and are tenacious. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit wholly.
• You deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settle.

Sezzle’s Technology Stack:

• Languages: Golang, Typescript, Python
• Frontend: Typescript - React and React Native
• Backend: Golang
• Database: MySQL, Postgres, Elasticsearch
• DevOps & Cloud: AWS, Kubernetes
• Version Control: Git
• CI/CD: Gitlab
• Testing: Developer and AI-driven, focus on automated end-to-end, integration, and unit tests
• Open Source: Sezzle is focused on using open source, and we build what we can before buying!

What Makes Working at Sezzle Awesome? 

At Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box thinkers, and determined innovators; we are skilled musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers. We believe in surrounding ourselves with not only the best and the brightest individuals, but those that are unique and purpose-driven in all that they do. Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.

#Li-remote #full-time

The salary range for this role is $5,000 - $9,500 per month (Gross in USD)

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values. As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!

Compensation:

For this principal development role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This range acknowledges the extensive expertise, leadership capabilities, and significant contributions expected at this level, offering a competitive salary to reflect the value of advanced skills and experience

About the Role: 

We are seeking a hands-on, high-impact Senior Security Infrastructure Engineer to help strengthen Sezzle’s security posture across cloud infrastructure, applications, and developer workflows. This role is ideal for someone who thrives in a fast-paced environment and wants to work on real-world security problems at scale.

As a Senior Security Infrastructure Engineer, you will have a high degree of ownership and autonomy to identify risks, investigate issues, and drive meaningful security improvements across our systems. You will work across vulnerability management, detection engineering, supply chain security, and incident response - partnering closely with engineering teams to ensure security is practical, effective, and embedded into how we build and operate systems. You should consider yourself a DOer - someone who is comfortable diving into logs, analyzing systems, validating findings, and working end-to-end to get issues resolved. We value engineers who bring strong technical depth, good judgment, and the ability to turn security insights into actionable outcomes.

This role offers the opportunity to shape and scale security capabilities, including detection systems, supply chain risk controls, and security automation. With the support of modern tooling (including AI where appropriate), you will play a key role in improving efficiency, visibility, and resilience across the organization. This role combines hands-on security operations with exploratory and design work. You will spend significant time investigating and resolving real-world issues, while also researching, evaluating, and building new security capabilities across areas like detection, supply chain security, and data protection.

What You’ll Do: 

• Lead and operate vulnerability management across infrastructure, platforms, and applications - including internal scans, dependency analysis, and external findings, validating true positives and driving remediation with engineering teams
• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and driving long-term fixes
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Lead and contribute to threat modeling exercises and security design reviews to identify risks early and strengthen architecture
• Apply deep expertise in AWS and Kubernetes to design, secure, and improve resilient and secure cloud infrastructure at scale
• Drive infrastructure and CI/CD hardening initiatives, with a focus on reducing software and container supply chain risk
• Lead efforts to implement and improve dependency and container supply chain risk detection systems and controls
• Partner closely with engineering teams to remediate vulnerabilities and improve secure development and deployment practices
• Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop and implement automation (including AI where appropriate) to improve efficiency in security operations, detection, and response
• Triage and validate external security findings, distinguishing true positives and coordinating remediation

What We Look For: 

• 6+ years of experience in security, software, or infrastructure engineering, with hands-on experience securing cloud-based production systems and working with real-world security challenges
• Experience contributing to threat modeling and security design reviews for modern systems
• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification
• Experience working with SIEM platforms (e.g., Wazuh, Splunk, ELK) for detection engineering, monitoring, and incident response
• Practical experience triaging findings from vulnerability scanners and bug bounty programs
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture, hardening, and operational best practices
• Experience improving infrastructure security, including CI/CD hardening and mitigating software supply chain risks
• Experience with container and dependency security tools (e.g., Snyk, Trivy, Grype, etc.)
• Ability to investigate issues directly using logs, cloud tooling, and system-level data
• Knowledge of common security vulnerabilities and mitigation strategies (OWASP, SANS, etc.)
• Working knowledge of compliance frameworks such as PCI DSS and SOC 2

Preferred Knowledge and Skills:

• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong understanding of cloud-native security controls, including IAM, network segmentation, and container security
• Familiarity with log-based detection, telemetry pipelines, and security analytics use cases
• Experience designing secure CI/CD workflows that reduce exposure to vulnerable dependencies and untrusted artifacts
• Ability to assess application and infrastructure risk and translate findings into actionable improvements
• Experience aligning technical security work with regulatory and compliance expectations
• Experience using automation and AI to reduce manual effort and improve consistency at scale

About You: 

• You think proactively about security and work to address risk early through clear design feedback and practical engineering solutions
• You bring strong cloud and infrastructure judgment, especially in AWS and Kubernetes environments
• You raise the bar on hardening and operational discipline, especially in CI/CD and supply chain security practices
• You approach security monitoring with an investigator’s mindset and can turn telemetry into meaningful detection and response outcomes
• You are excited to use automation and emerging technologies (including AI) to automate repetitive security work and improve team effectiveness
• You balance strong security standards with business needs and can support privacy and compliance requirements in a practical, scalable way
• You have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixed.
• You’re not bound by convention - your success—and much of the fun—lies in developing new ways to do things
• You need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-taking.
• You earn trust - you listen attentively, speak candidly, and treat others respectfully.
• You have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You have conviction and are tenacious. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit wholly.
• You deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settle.

Sezzle’s Technology Stack:

• Languages: Golang, Typescript, Python
• Frontend: Typescript - React and React Native
• Backend: Golang
• Database: MySQL, Postgres, Elasticsearch
• DevOps & Cloud: AWS, Kubernetes
• Version Control: Git
• CI/CD: Gitlab
• Testing: Developer and AI-driven, focus on automated end-to-end, integration, and unit tests
• Open Source: Sezzle is focused on using open source, and we build what we can before buying!

What Makes Working at Sezzle Awesome? 

At Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box thinkers, and determined innovators; we are skilled musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers. We believe in surrounding ourselves with not only the best and the brightest individuals, but those that are unique and purpose-driven in all that they do. Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.

#Li-remote #full-time

The salary range for this role is $5,000 - $9,500 per month (Gross in USD)

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values. As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!

Compensation:

For this principal development role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This range acknowledges the extensive expertise, leadership capabilities, and significant contributions expected at this level, offering a competitive salary to reflect the value of advanced skills and experience

About the Role: 

We are seeking a hands-on, high-impact Senior Security Infrastructure Engineer to help strengthen Sezzle’s security posture across cloud infrastructure, applications, and developer workflows. This role is ideal for someone who thrives in a fast-paced environment and wants to work on real-world security problems at scale.

As a Senior Security Infrastructure Engineer, you will have a high degree of ownership and autonomy to identify risks, investigate issues, and drive meaningful security improvements across our systems. You will work across vulnerability management, detection engineering, supply chain security, and incident response - partnering closely with engineering teams to ensure security is practical, effective, and embedded into how we build and operate systems. You should consider yourself a DOer - someone who is comfortable diving into logs, analyzing systems, validating findings, and working end-to-end to get issues resolved. We value engineers who bring strong technical depth, good judgment, and the ability to turn security insights into actionable outcomes.

This role offers the opportunity to shape and scale security capabilities, including detection systems, supply chain risk controls, and security automation. With the support of modern tooling (including AI where appropriate), you will play a key role in improving efficiency, visibility, and resilience across the organization. This role combines hands-on security operations with exploratory and design work. You will spend significant time investigating and resolving real-world issues, while also researching, evaluating, and building new security capabilities across areas like detection, supply chain security, and data protection.

What You’ll Do: 

• Lead and operate vulnerability management across infrastructure, platforms, and applications - including internal scans, dependency analysis, and external findings, validating true positives and driving remediation with engineering teams
• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and driving long-term fixes
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Lead and contribute to threat modeling exercises and security design reviews to identify risks early and strengthen architecture
• Apply deep expertise in AWS and Kubernetes to design, secure, and improve resilient and secure cloud infrastructure at scale
• Drive infrastructure and CI/CD hardening initiatives, with a focus on reducing software and container supply chain risk
• Lead efforts to implement and improve dependency and container supply chain risk detection systems and controls
• Partner closely with engineering teams to remediate vulnerabilities and improve secure development and deployment practices
• Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop and implement automation (including AI where appropriate) to improve efficiency in security operations, detection, and response
• Triage and validate external security findings, distinguishing true positives and coordinating remediation

What We Look For: 

• 6+ years of experience in security, software, or infrastructure engineering, with hands-on experience securing cloud-based production systems and working with real-world security challenges
• Experience contributing to threat modeling and security design reviews for modern systems
• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification
• Experience working with SIEM platforms (e.g., Wazuh, Splunk, ELK) for detection engineering, monitoring, and incident response
• Practical experience triaging findings from vulnerability scanners and bug bounty programs
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture, hardening, and operational best practices
• Experience improving infrastructure security, including CI/CD hardening and mitigating software supply chain risks
• Experience with container and dependency security tools (e.g., Snyk, Trivy, Grype, etc.)
• Ability to investigate issues directly using logs, cloud tooling, and system-level data
• Knowledge of common security vulnerabilities and mitigation strategies (OWASP, SANS, etc.)
• Working knowledge of compliance frameworks such as PCI DSS and SOC 2

Preferred Knowledge and Skills:

• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong understanding of cloud-native security controls, including IAM, network segmentation, and container security
• Familiarity with log-based detection, telemetry pipelines, and security analytics use cases
• Experience designing secure CI/CD workflows that reduce exposure to vulnerable dependencies and untrusted artifacts
• Ability to assess application and infrastructure risk and translate findings into actionable improvements
• Experience aligning technical security work with regulatory and compliance expectations
• Experience using automation and AI to reduce manual effort and improve consistency at scale

About You: 

• You think proactively about security and work to address risk early through clear design feedback and practical engineering solutions
• You bring strong cloud and infrastructure judgment, especially in AWS and Kubernetes environments
• You raise the bar on hardening and operational discipline, especially in CI/CD and supply chain security practices
• You approach security monitoring with an investigator’s mindset and can turn telemetry into meaningful detection and response outcomes
• You are excited to use automation and emerging technologies (including AI) to automate repetitive security work and improve team effectiveness
• You balance strong security standards with business needs and can support privacy and compliance requirements in a practical, scalable way
• You have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixed.
• You’re not bound by convention - your success—and much of the fun—lies in developing new ways to do things
• You need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-taking.
• You earn trust - you listen attentively, speak candidly, and treat others respectfully.
• You have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You have conviction and are tenacious. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit wholly.
• You deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settle.

Sezzle’s Technology Stack:

• Languages: Golang, Typescript, Python
• Frontend: Typescript - React and React Native
• Backend: Golang
• Database: MySQL, Postgres, Elasticsearch
• DevOps & Cloud: AWS, Kubernetes
• Version Control: Git
• CI/CD: Gitlab
• Testing: Developer and AI-driven, focus on automated end-to-end, integration, and unit tests
• Open Source: Sezzle is focused on using open source, and we build what we can before buying!

What Makes Working at Sezzle Awesome? 

At Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box thinkers, and determined innovators; we are skilled musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers. We believe in surrounding ourselves with not only the best and the brightest individuals, but those that are unique and purpose-driven in all that they do. Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.

#Li-remote #full-time

The salary range for this role is $5,000 - $9,500 per month (Gross in USD)

About Sezzle:

With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible. We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values. As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey. If you’re excited about pushing boundaries in tech and delivering a game-changing experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping!

Compensation:

For this principal development role, with 6+ years of experience, the compensation range is $5,000 - $9,500 USD based on experience level per month and in gross amount. This range acknowledges the extensive expertise, leadership capabilities, and significant contributions expected at this level, offering a competitive salary to reflect the value of advanced skills and experience

About the Role: 

We are seeking a hands-on, high-impact Senior Security Infrastructure Engineer to help strengthen Sezzle’s security posture across cloud infrastructure, applications, and developer workflows. This role is ideal for someone who thrives in a fast-paced environment and wants to work on real-world security problems at scale.

As a Senior Security Infrastructure Engineer, you will have a high degree of ownership and autonomy to identify risks, investigate issues, and drive meaningful security improvements across our systems. You will work across vulnerability management, detection engineering, supply chain security, and incident response - partnering closely with engineering teams to ensure security is practical, effective, and embedded into how we build and operate systems. You should consider yourself a DOer - someone who is comfortable diving into logs, analyzing systems, validating findings, and working end-to-end to get issues resolved. We value engineers who bring strong technical depth, good judgment, and the ability to turn security insights into actionable outcomes.

This role offers the opportunity to shape and scale security capabilities, including detection systems, supply chain risk controls, and security automation. With the support of modern tooling (including AI where appropriate), you will play a key role in improving efficiency, visibility, and resilience across the organization. This role combines hands-on security operations with exploratory and design work. You will spend significant time investigating and resolving real-world issues, while also researching, evaluating, and building new security capabilities across areas like detection, supply chain security, and data protection.

What You’ll Do: 

• Lead and operate vulnerability management across infrastructure, platforms, and applications - including internal scans, dependency analysis, and external findings, validating true positives and driving remediation with engineering teams
• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rule development, alert tuning, and investigation workflows
• Investigate and respond to security incidents across cloud infrastructure and applications, performing root cause analysis and driving long-term fixes
• Design and implement detection strategies for suspicious activity, including data exfiltration patterns using application and database telemetry
• Lead and contribute to threat modeling exercises and security design reviews to identify risks early and strengthen architecture
• Apply deep expertise in AWS and Kubernetes to design, secure, and improve resilient and secure cloud infrastructure at scale
• Drive infrastructure and CI/CD hardening initiatives, with a focus on reducing software and container supply chain risk
• Lead efforts to implement and improve dependency and container supply chain risk detection systems and controls
• Partner closely with engineering teams to remediate vulnerabilities and improve secure development and deployment practices
• Support and implement security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop and implement automation (including AI where appropriate) to improve efficiency in security operations, detection, and response
• Triage and validate external security findings, distinguishing true positives and coordinating remediation

What We Look For: 

• 6+ years of experience in security, software, or infrastructure engineering, with hands-on experience securing cloud-based production systems and working with real-world security challenges
• Experience contributing to threat modeling and security design reviews for modern systems
• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification
• Experience working with SIEM platforms (e.g., Wazuh, Splunk, ELK) for detection engineering, monitoring, and incident response
• Practical experience triaging findings from vulnerability scanners and bug bounty programs
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture, hardening, and operational best practices
• Experience improving infrastructure security, including CI/CD hardening and mitigating software supply chain risks
• Experience with container and dependency security tools (e.g., Snyk, Trivy, Grype, etc.)
• Ability to investigate issues directly using logs, cloud tooling, and system-level data
• Knowledge of common security vulnerabilities and mitigation strategies (OWASP, SANS, etc.)
• Working knowledge of compliance frameworks such as PCI DSS and SOC 2

Preferred Knowledge and Skills:

• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong understanding of cloud-native security controls, including IAM, network segmentation, and container security
• Familiarity with log-based detection, telemetry pipelines, and security analytics use cases
• Experience designing secure CI/CD workflows that reduce exposure to vulnerable dependencies and untrusted artifacts
• Ability to assess application and infrastructure risk and translate findings into actionable improvements
• Experience aligning technical security work with regulatory and compliance expectations
• Experience using automation and AI to reduce manual effort and improve consistency at scale

About You: 

• You think proactively about security and work to address risk early through clear design feedback and practical engineering solutions
• You bring strong cloud and infrastructure judgment, especially in AWS and Kubernetes environments
• You raise the bar on hardening and operational discipline, especially in CI/CD and supply chain security practices
• You approach security monitoring with an investigator’s mindset and can turn telemetry into meaningful detection and response outcomes
• You are excited to use automation and emerging technologies (including AI) to automate repetitive security work and improve team effectiveness
• You balance strong security standards with business needs and can support privacy and compliance requirements in a practical, scalable way
• You have relentlessly high standards - many people may think your standards are unreasonably high. You are continually raising the bar and driving those around you to deliver great results. You make sure that defects do not get sent down the line and that problems are fixed so they stay fixed.
• You’re not bound by convention - your success—and much of the fun—lies in developing new ways to do things
• You need action - speed matters in business. Many decisions and actions are reversible and do not need extensive study. We value calculated risk-taking.
• You earn trust - you listen attentively, speak candidly, and treat others respectfully.
• You have backbone; disagree, then commit - you can respectfully challenge decisions when you disagree, even when doing so is uncomfortable or exhausting. You have conviction and are tenacious. You do not compromise for the sake of social cohesion. Once a decision is determined, you commit wholly.
• You deliver results - you focus on the key inputs and deliver them with the right quality and in a timely fashion. Despite setbacks, you rise to the occasion and never settle.

Sezzle’s Technology Stack:

• Languages: Golang, Typescript, Python
• Frontend: Typescript - React and React Native
• Backend: Golang
• Database: MySQL, Postgres, Elasticsearch
• DevOps & Cloud: AWS, Kubernetes
• Version Control: Git
• CI/CD: Gitlab
• Testing: Developer and AI-driven, focus on automated end-to-end, integration, and unit tests
• Open Source: Sezzle is focused on using open source, and we build what we can before buying!

What Makes Working at Sezzle Awesome? 

At Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box thinkers, and determined innovators; we are skilled musicians, yogis, cyclists, chefs, golfers, dog-lovers, and rock-climbers. We believe in surrounding ourselves with not only the best and the brightest individuals, but those that are unique and purpose-driven in all that they do. Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.

#Li-remote #full-time

We are seeking an Application Security Engineer with a strong background in web application security design, secure development practices, and vulnerability testing. This role also requires practical experience with Software Bill of Materials (SBOM) management and implementation, contributing to our secure SDLC and software supply chain risk reduction efforts.

Duties and Responsibilities:

• Perform threat modeling, security architecture review, and design analysis for web applications and APIs.
• Conduct manual and automated security testing during development and pre-release stages.
• Design and implement security pipelines (including SAST and DAST) and integrate them into the SDLC process.
• Implement and manage SBOM generation and consumption processes across the SDLC.
• Collaborate with development teams to ensure timely remediation of identified vulnerabilities.
• Maintain security guidance aligned with OWASP best practices and provide trainings for development teams.
• Stay current with evolving application security threats, tools, and industry developments.

Qualifications and Experience:

• 3–5 years of experience in application security, with a focus on web applications and API security.
• Good knowledge of at least one scripting or programming language (e.g., Python, JavaScript, C#, or Go).
• Experience with tools like OWASP ZAP, Burp Suite, Snyk, or similar.
• Familiarity with secure coding, DevSecOps, and container security concepts.
• Strong understanding of CVE, CVSS, and vulnerability disclosure workflows.
• Excellent command of business English.
• Preferred Qualifications:
• Knowledge of SBOM standards (CycloneDX, SPDX) and experience integrating SBOM tooling into CI/CD pipelines.
• Knowledge of software composition analysis (SCA) tools.

THE ROLE

Apparel - Sourcing Manager, Mens Leather Outerwear (EUR)

We are seeking a strategic and entrepreneurial Sourcing Manager specifically for our Men's Leather Outwear category  This person will be tasked with identifying and onboarding new vendor partners from scratch. The role will focus primarily on Men's Leather Outwear category with potential expansion into other categories.

This is a rare opportunity to own and build a sourcing operation in a high-impact category. The ideal candidate will bring deep knowledge of category manufacturing, strong vendor relationships (or the ability to cultivate them), and the operational rigor to scale new supply chains that deliver on cost, quality, and lead time.

Responsibilities

• Scout for vendor partners in the UK and Europe who can manufacture high quality Men's Leather Outerwear products with fast production lead time
• Pitching and on-boarding vendor partners in speed. This should be done with clear criteria around the initial test period and ensuring their ability to scale, if the test period is successful.
• Drive excellence in partner operations for existing supplier relationships within current Quince categories, while expanding a redundant supplier base  improving Quince's product costs, quality, and commercial terms for sustainable sales and profitability
• Manage capacity at a supplier and style level to keep pace with company growth and scale
• Material Sourcing: Resource in speed any materials that can effectively improve product cost, quality and speed as options for scaling order. Have experience negotiating with suppliers throughout the supply chain from T1 to T2 & T3 (as needed)  mill/ vendor partners.
• Open costing expertise: Have solid open costing breakdown experience from brand or manufacturer side to build a clear strategy for costing negotiations; able to construct a validated cost structure/ template to negotiate with vendor partners without relying on vendor data only.
• Act as an Ambassador to our partners in all interactions, building and deepening our relationships Continuous improvement
• Drive for higher hit-rate launches (reviews, returns, sales) through product excellence and drive for faster development times by identifying bottlenecks and proposing solutions
• Have a clear strategic, commercial understanding of the sourcing landscape and trade benefits that can improve product costs and speed of product to market destined for the USA, Canada, and Europe as an asset. 
• Lead at 30,000 ft and 3000 ft involving a diverse set of stakeholders from different functions and nationalities.  Be willing to be scrappy at times to improve on existing ways of working and redefining new processes and SOP for faster speed and continuous improvement.

Qualifications

• Experience: 10 year + sourcing and merchandising experience in Men’s apparel categories with high-end national brands in the United States & Europe specifically in Men's Leather Outerwear. 
• Consumer focused and ambitious individual providing strategic leadership and act as a role model in business with self assurance, pride, and passion that exudes personal and professional impact
• Self-Motivated: Proven ability as a self starter and quick independent learner adapting swiftly to new challenges
• Detail Oriented: Exceptional attention to details with a data driven approach to decision making and problem-solving.
• Analytical Skills: Strong analytical mindset with a focus on execution, process improvement, and brand enhancement.
• Curiosity: Continuous learner with a proactive attitude, open to new perspectives and adaptable to changing circumstances.
• Supply Chain or Operations Background: Good track record in supply chain management or operations contributing to a well-rounded understanding of the retail landscape.
• Collaborative Nature: Excellent interpersonal skills, fostering collaboration across teams, skilled in written and verbal communication and presentation.
• Resilient under pressure and relentless in the drive to create broader impact by being bold and challenging the status quo.

Pay Range: £100,000.00 - £135,000.000 GBP

THE ROLE

Apparel - Sourcing Manager, Men's Woven Tops

We are seeking a strategic and entrepreneurial Sourcing Manager to build and lead our Men's Woven Top function. This person will be tasked with identifying and onboarding new vendor partners from scratch. The role will focus primarily on Men's Woven Tops category with potential expansion into other categories.

This is a rare opportunity to own and build a sourcing operation in a high-impact category. The ideal candidate will bring deep knowledge of category manufacturing, strong vendor relationships (or the ability to cultivate them), and the operational rigor to scale new supply chains that deliver on cost, quality, and lead time.

Responsibilities

• Scout for vendor partners in the UK and Europe who can manufacture high quality Men's Woven Tops products with fast production lead time
• Pitching and on-boarding vendor partners in speed. This should be done with clear criteria around the initial test period and ensuring their ability to scale, if the test period is successful.
• Drive excellence in partner operations for existing supplier relationships within current Quince categories, while expanding a redundant supplier base  improving Quince's product costs, quality, and commercial terms for sustainable sales and profitability
• Manage capacity at a supplier and style level to keep pace with company growth and scale
• Material Sourcing: Resource in speed any materials that can effectively improve product cost, quality and speed as options for scaling order. Have experience negotiating with suppliers throughout the supply chain from T1 to T2 & T3 (as needed)  mill/ vendor partners.
• Open costing expertise: Have solid open costing breakdown experience from brand or manufacturer side to build a clear strategy for costing negotiations; able to construct a validated cost structure/ template to negotiate with vendor partners without relying on vendor data only.
• Act as an Ambassador to our partners in all interactions, building and deepening our relationships Continuous improvement
• Drive for higher hit-rate launches (reviews, returns, sales) through product excellence and drive for faster development times by identifying bottlenecks and proposing solutions
• Have a clear strategic, commercial understanding of the sourcing landscape and trade benefits that can improve product costs and speed of product to market destined for the USA, Canada, and Europe as an asset. 
• Lead at 30,000 ft and 3000 ft involving a diverse set of stakeholders from different functions and nationalities.  Be willing to be scrappy at times to improve on existing ways of working and redefining new processes and SOP for faster speed and continuous improvement.

Qualifications 

• Experience: 10 year + sourcing and merchandising experience in Men’s apparel categories with high-end national brands in the United States & Europe specifically in Men's Woven Tops. 
• Consumer focused and ambitious individual providing strategic leadership and act as a role model in business with self assurance, pride, and passion that exudes personal and professional impact
• Self-Motivated: Proven ability as a self starter and quick independent learner adapting swiftly to new challenges
• Detail Oriented: Exceptional attention to details with a data driven approach to decision making and problem-solving.
• Analytical Skills: Strong analytical mindset with a focus on execution, process improvement, and brand enhancement.
• Curiosity: Continuous learner with a proactive attitude, open to new perspectives and adaptable to changing circumstances.
• Supply Chain or Operations Background: Good track record in supply chain management or operations contributing to a well-rounded understanding of the retail landscape.
• Collaborative Nature: Excellent interpersonal skills, fostering collaboration across teams, skilled in written and verbal communication and presentation.
• Resilient under pressure and relentless in the drive to create broader impact by being bold and challenging the status quo.
  
  

Pay Range: 

THE ROLE

We are seeking a highly skilled Senior Sourcing Manager, Soft Home (Europe) to build and manage our vendor base across Europe for home textiles. This individual will focus primarily on bedding and secondarily on window treatments, table linens, and other soft home textiles. This is a pivotal role as we expand sourcing outside of Asia and diversify our supply chain. The ideal candidate will bring deep product knowledge, a robust vendor network, and the ability to navigate the complexities of sourcing in Europe. This is an individual contributor role reporting to Tugba Geyisi.

This person will serve as the linchpin in launching Quince’s Home Textiles business in Europe, owning both vendor management and upstream sourcing strategy across nominated mills and finished goods suppliers.

RESPONSIBILITIES

Vendor Development & Management

• Identify, evaluate, and onboard high-quality, high-compliance vendor partners across Europe for HOME TEXTILES with fast production lead times.
  
  
• Drive excellence in partner operations for existing supplier relationships within current and new Quince categories, while expanding the supply base and improving Quince’s product costs, quality, and commercial terms.
  
  
• Act as an ambassador to our partners in all interactions, building and deepening our relationships.
  
  
• Pitch and onboard vendor partners quickly, with clear onboarding criteria and scalability targets.
  
  
• Drive continuous improvement by increasing hit-rate launches (reviews, returns, sales) through product excellence and faster development times.
  
  
• Negotiate commercial terms including MOQs, pricing, capacity planning, and compliance.
  
  

Upstream Material Sourcing

• Evaluate mill capabilities and work closely with internal product and quality teams to nominate optimal partners.
  
  
• Manage mill relationships and ensure smooth handoff of greige fabric to finished goods partners.
  
  

Category Ownership

• Serve as the sourcing lead for all home textiles from Europe, ensuring quality, margin, and lead time KPIs are met.
  
  
• Build scalable and diversified supply chains for each relevant product category (bedding, window, table linens).
  
  

Product Development & Speed-to-Market

• Partner with factories to drive product innovation and reduce development lead times.
  
  
• Optimize raw material and finished goods development calendars to enable rapid testing and scaling.
  
  

Cross-Functional Collaboration

• Collaborate with merchandising, planning, and tech design teams to ensure aligned goals and seamless execution.
  
  
• Drive continuous improvement in supplier performance and cost efficiency.
  
  

REQUIREMENTS

• 8+ years of experience in sourcing, production, or supply chain roles, ideally within bedding, linens, or similar home categories.
  
  
• Deep understanding of fabric development, materials (e.g., cotton, linen, bamboo), filling materials, and workmanship.
  
  
• Strong network of European textile manufacturers and nominated mills preferred.
  
  
• Demonstrated success in identifying and managing both mill and factory partners.
  
  
• Ability to set and execute a strategy for scaling a high-volume product line.
  
  
• Fluent in English; additional European languages a plus.
  
  
• Strong analytical skills, including comfort with margin modeling, lead time analysis, and vendor scorecards.
  
  
• Excellent cross-functional communication and collaboration skills.
  
  
• Bachelor’s degree in Supply Chain, Business, Textiles, or related field.
  
  
• Ability to travel around Europe and Middle East, especially to vendors/factories in Turkey and Portugal