freehire launches on Product Hunt on 26 August.

Follow →

Security Engineer

Summary

Security Engineer protects client data and infrastructure on AWS, automating security controls, monitoring threats, and responding to incidents using tools like WAF, GuardDuty, and IAM.

The Security Engineer in the Security Operations and Compliance team is responsible for safeguarding internal company data and client information, including consumer credit data and PII. This position involves managing information security policies, processes, and tools; overseeing vendor risk management; and ensuring compliance with internal policies, government regulations, and customer requirements. As part of the MeridianLink Security team, the Security Engineer will engage in problem-solving, automating processes, and enhancing the trustworthiness of our services. Responsibilities include maintaining the security of a serverless AWS platform using services such as WAF, IAM, KMS, GuardDuty, and CloudWatch, and focusing on developing, deploying, and executing controls and defenses to ensure the security, compliance, and risk mitigation of the firm's technology infrastructure and data assets.

Responsibilities

  • Collaborate with the MeridianLink Security team to improve automation and detection initiatives for resilient solutions.

  • Build and enhance security tooling, automated checks, and CI/CD pipeline controls for internal tools and services.

  • Analyze internal metrics and alerting workflows to reduce false positives and accurately focus engineering efforts.

  • Develop repeatable processes and build playbooks to efficiently resolve incidents.

  • Participate in a weekly on-call rotation as the primary incident responder/incident manager.

  • Implement validated security strategies for AWS-based serverless infrastructure and authentication surfaces, including SAML single sign-on with online-banking identity providers.

Qualifications: Knowledge, Skills, & Abilities

  • Bachelor's degree in computer science or related field and 2-4 years of related experience or equivalent work experience.

  • Experience in Security Operations, security monitoring, Incident Response, and Threat Intelligence.

  • 3+ years of work experience as a Security Engineer or related position.

  • 2+ years of experience in cybersecurity technologies, focusing on areas such as vulnerability management, security monitoring, data logging, and IAM.

  • 1+ years' experience with AWS security services, such as WAF, GuardDuty, IAM, KMS, and CloudWatch.

  • 2+ years of experience in tool integrations and REST APIs, as well as TypeScript or Python experience.

  • Proficiency in networking technologies, network security, and network monitoring solutions.

  • Knowledge of security systems, including authentication and single sign-on (SAML, OIDC/OAuth), web application firewalls, and intrusion detection and notification systems.

  • Familiarity with infrastructure as code, such as Pulumi, SST, or Terraform, and public cloud platforms, such as AWS.

What this application asks

ashby

Name, Email, Resume

  • Are you eighteen years of age or older? yes / no
  • May MeridianLink contact your CURRENT or MOST RECENT employer? yes / no
  • May MeridianLink Contact your PAST employers? yes / no
  • Have you ever been fired or asked to resign to avoid being fired from a job? yes / no
  • Can you perform the essential functions of this job with or without reasonable accomodation? yes / no
  • Will you now or in the future require sponsorship (i.e. H-1B visa ect.) to legally work in the United States? yes / no
  • Location
  • I understand that as permitted by law, MeridianLink will conduct an investigative consumer report. I understand the scope of this consumer report may include verification of my references, employment history, credit and indebtedness, criminal conviction history, educational and training background and other matters related to my suitability for employment. Upon timely written request to the personnel department of MeridianLink, the nature and scope of the report will be disclosed to me. If I am offered employment with MeridianLink, I understand that the offer will be conditioned on passing a pre-employment drug screen, timely submitting valid documentation that confirms my identity and authorization to work in the United States, and reading and agreeing to comply with the MeridianLink policies as stated in its Employee Handbook. I certify that the answers given by me in this employment application are true, correct and complete. I agree that the company shall not be liable, in any respect, if my employment is terminated because of misstatements or pertinent omissions made by me in this application. Moreover, I understand that all offers of employment are contingent upon passing the company's prescribed credit check and background screen. A copy of this form may be used as the original. The use of results from this form and/or tests will be used for prudent employment decisions. It is agreed and understood that completion of this application does not mean a job opening exists and in no way obligates the company to employ me. In the event of employment, I will comply with all company rules and regulations as established from time to time. I am willing to work all assigned overtime or other special work assignments as requested by the company. I also understand that MeridianLink, Inc. retains the right to amend, modify, add or delete any or all policies or procedures at its sole and absolute discretion. I understand that nothing contained herein is intended to create a contract between the company and me for either employment or the provision of any compensation or benefits. I hereby understand and acknowledge that any employment relationship with this Company is of an “At-Will” nature, which means that the Employee may resign at any time and the Employer may discharge Employee at any time, with or without notice, with or without cause. It is further understood that this ‘At-Will’ employment relationship may not be changed by any written document or by verbal agreement unless such change is specifically acknowledged in writing by an authorized Executive of this Company. During my employment with MeridianLink, Inc. and after my employment ends, I agree not to disclose any confidential or proprietary information regarding operating and trade secrets. CERTIFICATE OF APPLICANT: I certify that all statements made in this application and attachments are true, and I agree and understand that misstatements or omissions of any material fact may be cause for disqualification or dismissal from employment with MeridianLink choose one
  • Please let us know where you heard about this job opening? choose one
  • If Referral please add name below. optional
  • If above question is "Other" please add the source below.  written answer · optional

See also

Tailor your CV for this role?

We couldn't check your fit for this role — add a CV to your profile to see it next time.

A new version of freehire is available