Senior Security Engineer, Detection & Response

atSezzleRemoteLatin America Full-time Cybersecurity / Security EngineerSenior$5,000 – $9,500/month

Posted Nov 3

This is a fully remote position, open to applicants in Latin America.

📋 Description

• Develop, manage, and enhance SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and incident investigation workflows.

• Create detection strategies for identifying suspicious activities and patterns of data exfiltration.

• Broaden audit and attribution coverage across Kubernetes, databases, SSO, and various access paths.

• Investigate and respond to security incidents within cloud infrastructure and applications.

• Conduct root cause analysis and implement long-term remediation strategies.

• Perform proactive threat hunting across cloud environments and identity platforms.

• Establish repeatable and effective threat-hunting workflows.

• Manage vulnerability across infrastructure, platforms, and applications.

• Assess and validate external security findings, including bug bounty reports.

• Collaborate with engineering teams for remediation efforts.

• Contribute to threat modeling and security design evaluations.

• Provide guidance to teams on AWS and Kubernetes security remediation practices.

• Support security controls in alignment with PCI DSS, SOC 2, and additional compliance requirements.

• Create automation, including AI solutions, for security operations, detection, and incident response.

• Engage in the on-call rotation for detection and response, as well as for owned services.

• Report directly to the Director of Information Security while working alongside security platform, network, and zero-trust engineers.

⛳️ Requirements

• Over 6 years of experience in security, software, or infrastructure engineering.

• Practical experience in securing cloud-based production systems.

• Familiarity with SIEM platforms such as Wazuh, Splunk, or ELK.

• Experience in designing and fine-tuning detection rules to minimize alert noise and enhance investigation workflows.

• Robust hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification.

• Strong understanding of AWS, Linux, and Kubernetes infrastructure.

• Skill in investigating issues using logs, cloud tools, and system-level data.

• Experience in evaluating detection and logging considerations during design reviews.

• Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS guidelines.

• Understanding of PCI DSS and SOC 2 compliance frameworks.

• Demonstrated experience in AI-forward engineering using tools such as Claude Code, Codex, Cursor, or custom LLM integrations.

• Preferred: Experience in AI-assisted workflow development, log-based detection, telemetry pipelines, internal penetration testing, cloud-native security controls, container and dependency security tools, regulatory compliance, as well as fintech or payments experience.