Security Engineer

Far Coder; Northern (KY); Hybrid; USD 25,000 - 40,000; Full time

Job summary

MeridianLink is hiring a remote Security Engineer to join the Security Operations and Compliance team. You will safeguard data and client information across a serverless AWS platform, implementing and enforcing security controls, and coordinating incident response.

Responsibilities include building security tooling, CI/CD controls, and playbooks while collaborating on automation and detection initiatives. A strong background in security operations and AWS security services is required.

Qualifications

• Bachelor's degree in computer science or related field and 2-4 years of related experience or equivalent work experience.
• Experience in Security Operations, security monitoring, Incident Response, and Threat Intelligence.
• 3+ years of work experience as a Security Engineer or related position.
• 2+ years of experience in cybersecurity technologies focusing on vulnerability management, security monitoring, data logging, and IAM.
• 1+ years' experience with AWS security services such as WAF, GuardDuty, IAM, KMS, and CloudWatch.
• 2+ years of experience in tool integrations and REST APIs, as well as TypeScript or Python experience.
• Proficiency in networking technologies, network security, and network monitoring solutions.
• Knowledge of security systems including authentication and single sign-on (SAML, OIDC/OAuth), web application firewalls, and intrusion detection and notification systems.
• Familiarity with infrastructure as code, such as Pulumi, SST, or Terraform, and public cloud platforms, such as AWS.

Responsibilities

• Collaborate with the MeridianLink Security team to improve automation and detection initiatives for resilient solutions.
• Build and enhance security tooling, automated checks, and CI/CD pipeline controls for internal tools and services.
• Analyze internal metrics and alerting workflows to reduce false positives and accurately focus engineering efforts.
• Develop repeatable processes and build playbooks to efficiently resolve incidents.
• Participate in a weekly on-call rotation as the primary incident responder/incident manager.
• Implement validated security strategies for AWS-based serverless infrastructure and authentication surfaces, including SAML SSO with online-banking identity providers.

Skills

TypeScript

Terraform

CI/CD

Python

Rust

AWS

Education

Bachelor's degree in Computer Science or related field

Tools

REST APIs

IAM

CloudWatch

GuardDuty

WAF

KMS

Job description

# Remote Security Engineer Job at MeridianLinkUSA6 hours agoFull TimeUSA$25000 - $40000 USDTypeScriptTerraformCI/CDPythonRustAWSRESTComplianceFirewallRisk ManagementSecurityTypescript“When applying, mention the word FarCoder to show you’ve read the job post completely. Employers can look for these words to identify genuine, thoughtful applicants and avoid spam.”## Job OverviewMeridianLink is hiring a remote candidate for Security Engineer. This is a full time position. Work location: USA.The role typically involves technologies such as TypeScript, Terraform, CI/CD, Python, Rust, AWS.## Required Skills### Primary Skills* TypeScript* Terraform* CI/CD* Python* Rust* AWS### Secondary Skills* REST* Compliance* Firewall* Risk Management* Security* TypescriptSkills required for this role include TypeScript, Terraform, CI/CD, and related tools for day-to-day development.## Job Details* **Employment Type:** Full Time* **Location:** USA* **Salary:** $25000 – $40000 USD## Tech StackTypeScript, Terraform, CI/CD, Python, Rust, AWS, REST, Compliance, Firewall, Risk Management, Security, Typescript## Role detailsThe Security Engineer in the Security Operations and Compliance team is responsible for safeguarding internal company data and client information, including consumer credit data and PII. This position involves managing information security policies, processes, and tools; overseeing vendor risk management; and ensuring compliance with internal policies, government regulations, and customer requirements. As part of the MeridianLink Security team, the Security Engineer will engage in problem-solving, automating processes, and enhancing the trustworthiness of our services. Responsibilities include maintaining the security of a serverless AWS platform using services such as WAF, IAM, KMS, GuardDuty, and CloudWatch, and focusing on developing, deploying, and executing controls and defenses to ensure the security, compliance, and risk mitigation of the firm's technology infrastructure and data assets.Responsibilities* Collaborate with the MeridianLink Security team to improve automation and detection initiatives for resilient solutions.* Build and enhance security tooling, automated checks, and CI/CD pipeline controls for internal tools and services.* Analyze internal metrics and alerting workflows to reduce false positives and accurately focus engineering efforts.* Develop repeatable processes and build playbooks to efficiently resolve incidents.* Participate in a weekly on-call rotation as the primary incident responder/incident manager.* Implement validated security strategies for AWS-based serverless infrastructure and authentication surfaces, including SAML single sign-on with online-banking identity providers.**Qualifications:**Knowledge, Skills, & Abilities* Bachelor's degree in computer science or related field and 2-4 years of related experience or equivalent work experience.* Experience in Security Operations, security monitoring, Incident Response, and Threat Intelligence.* 3+ years of work experience as a Security Engineer or related position.* 2+ years of experience in cybersecurity technologies, focusing on areas such as vulnerability management, security monitoring, data logging, and IAM.* 1+ years' experience with AWS security services, such as WAF, GuardDuty, IAM, KMS, and CloudWatch.* 2+ years of experience in tool integrations and REST APIs, as well as TypeScript or Python experience.* Proficiency in networking technologies, network security, and network monitoring solutions.* Knowledge of security systems, including authentication and single sign-on (SAML, OIDC/OAuth), web application firewalls, and intrusion detection and notification systems.* Familiarity with infrastructure as code, such as Pulumi, SST, or Terraform, and public cloud platforms, such as AWS.