Senior Security Engineer, Detection & Response

Sezzle

. Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows .

Posted 11/3/2026full-timeRemote • SerbiaSenior💰 $5,000 - $9,500 per monthWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and operating SIEM/XDR capabilities, with a strong focus on cloud security, vulnerability management, and compliance with standards such as PCI DSS and SOC 2. Proficient in developing automation for security operations and collaborating with engineering teams to enhance security measures.

Highest-signal resume keywords

SIEM Platform ExperienceAWS Security ExpertiseVulnerability ManagementCloud Infrastructure SecurityCompliance Framework Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Log IngestionDetection Rules DesignAlert TuningRoot Cause AnalysisThreat HuntingVulnerability ScanningIncident InvestigationSecurity ArchitectureAutomation DevelopmentCloud Security Best Practices

Tools & Technologies

WazuhSplunkELKClaude CodeCodexCursorSnykTrivyGrypeKubernetes

Industry Keywords

PCI DSSSOC 2OWASPSANSFintechPaymentsRegulated Environments

Tech Stack

Tools & technologies

AWSCloudKubernetesLinuxSplunk

About the role

Key responsibilities & impact

Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows
Design and implement detection strategies for suspicious activity and data exfiltration
Extend audit and attribution coverage across Kubernetes, databases, SSO, and access-path telemetry
Investigate and respond to security incidents across cloud infrastructure and applications
Perform root cause analysis and drive long-term fixes
Run proactive threat hunts across cloud and identity planes
Build repeatable agentic threat-hunting workflows
Operate vulnerability management across infrastructure, platforms, and applications
Triage and validate external security findings, including bug bounty reports
Coordinate remediation with engineering teams and verify fixes
Contribute to threat modeling and security design reviews
Apply AWS and Kubernetes expertise to secure operated systems and advise owning teams
Support security controls aligned with PCI DSS, SOC 2, and other compliance requirements
Develop automation, including AI, for security operations, detection, and response
Participate in the on-call rotation for detection and response and owned services
Report to the Director of Information Security and collaborate with security platform, network, and zero-trust engineers

Requirements

What you’ll need

6+ years of experience in security, software, or infrastructure engineering
Hands-on experience securing cloud-based production systems
Experience with SIEM platforms such as Wazuh, Splunk, or ELK
Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
Strong hands-on vulnerability-management experience, including scanning, triage, validation, remediation coordination, and verification
Strong knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture and operational best practices
Ability to investigate issues using logs, cloud tooling, and system-level data
Experience assessing detection and logging implications in design reviews
Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS
Working knowledge of PCI DSS and SOC 2 compliance frameworks
Demonstrated AI-forward engineering experience using tools such as Claude Code, Codex, Cursor, or custom LLM integrations
Preferred: experience building AI-assisted workflows adopted by others
Preferred: familiarity with log-based detection, telemetry pipelines, and security analytics
Preferred: internal penetration testing or adversarial exercise experience
Preferred: cloud-native security controls including IAM, network segmentation, and container security
Preferred: experience with Snyk, Trivy, or Grype
Preferred: experience aligning technical security work with regulatory and compliance expectations
Preferred: experience in fintech, payments, or regulated environments

Benefits

Comp & perks

Competitive gross salary of $5,000–$9,500 USD per month, based on experience level
Culture that supports AI-assisted engineering and emerging technologies
Opportunity to work with a dynamic, innovative fintech and retail team
Open-source-focused engineering environment
Team culture supporting varied interests and purpose-driven employees