Security Engineer — AWS Serverless & Incident Response

Apply; Northern (KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

MeridianLink is seeking a Security Engineer to join the Security Operations and Compliance team. You will safeguard internal data and client information, manage policies, vendor risk, and compliance.

The role focuses on serverless AWS security (WAF, IAM, KMS, GuardDuty, CloudWatch) and developing defenses across our technology stack. You will participate in on-call rotations, build automated checks, and help implement security strategies for AWS-based serverless systems and SAML-based

Qualifications

• Bachelor's degree in computer science or related field and 2-4 years of related experience or equivalent work experience.
• Experience in Security Operations, security monitoring, Incident Response, and Threat Intelligence.
• 3+ years of work experience as a Security Engineer or related position.
• 2+ years of experience in cybersecurity technologies, focusing on areas such as vulnerability management, security monitoring, data logging, and IAM.
• 1+ years' experience with AWS security services, such as WAF, GuardDuty, IAM, KMS, and CloudWatch.
• 2+ years of experience in tool integrations and REST APIs, as well as TypeScript or Python experience.
• Proficiency in networking technologies, network security, and network monitoring solutions.
• Knowledge of security systems, including authentication and single sign-on (SAML, OIDC/OAuth), web application firewalls, and intrusion detection and notification systems.
• Familiarity with infrastructure as code, such as Pulumi, SST, or Terraform, and public cloud platforms, such as AWS.

Responsibilities

• Collaborate with the MeridianLink Security team to improve automation and detection initiatives for resilient solutions.
• Build and enhance security tooling, automated checks, and CI/CD pipeline controls for internal tools and services.
• Analyze internal metrics and alerting workflows to reduce false positives and accurately focus engineering efforts.
• Develop repeatable processes and build playbooks to efficiently resolve incidents.
• Participate in a weekly on-call rotation as the primary incident responder/incident manager.
• Implement validated security strategies for AWS-based serverless infrastructure and authentication surfaces, including SAML single sign-on with online-banking identity providers.

Skills

Security Operations

Security Monitoring

Incident Response

Threat Intelligence

AWS Security

REST APIs

TypeScript/Python

Networking

SSO/SAML/OAuth

IaC (Pulumi/SST/Terraform)

Education

Bachelor's degree in CS or related field

Tools

AWS security services (WAF, GuardDuty, IAM, KMS, CloudWatch)

Job description

MeridianLink is seeking a Security Engineer to join the Security Operations and Compliance team. You will safeguard internal data and client information, manage policies, vendor risk, and compliance.

The role focuses on serverless AWS security (WAF, IAM, KMS, GuardDuty, CloudWatch) and developing defenses across our technology stack. You will participate in on-call rotations, build automated checks, and help implement security strategies for AWS-based serverless systems and SAML-based