Product Security Engineer

Meridian Cooperative is seeking a highly skilled and experienced Product Security Engineer to join our team.  This pivotal role will focus on safeguarding our enterprise-scale applications, including ERP systems and SaaS platforms.  The ideal candidate will be responsible for identifying vulnerabilities, implementing robust security measures, and ensuring the protection of sensitive data.

At Meridian, we are energized by the fact that our work is important.  We are driven to make work as easy as possible for our Members, Customers, Partners, and Employees.  Help us lead the way in Utility Software, join a winning company and thrive. 

For applicants viewing the role on non-Meridian job boards, apply directly HERE

What You'll Bring:

• A pragmatic mindset that values impact over perfection
• Proven ability to align technology solutions with business objectives
• Passion for innovation
• An insatiable curiosity and drive for personal and professional growth

Essential Functions:

• Design and implement security controls across the full OSI model — from firewalls and load balancers to application layer defenses, API hardening, and secure coding practices
• Design, implement, and maintain secure development lifecycle (SDL) practices to integrate security into every phase of the software development process.
• Perform threat modeling, risk assessments, and security reviews for applications, infrastructure, and third-party integrations
• Develop and enforce secure coding guidelines and provide security training for engineering teams
• Introduce and maintain security tooling in CI/CD pipelines (SAST, DAST, SCA, secrets scanning, etc.)
• Assist in securely onboarding Kubernetes, with a focus on runtime protection, workload identity, image scanning, and RBAC
• Work with DevOps, SRE and Engineering teams on detection, response, and recovery plans
• Develop and maintain security policies, compliance frameworks, and best practices to align with industry standards (e.g., PCI, NIST, ISO 27001, SOC 2, GDPR)
• Collaborate with cross-functional teams to ensure product security requirements are met without compromising performance or usability
• Conduct security architecture reviews for new and existing applications to ensure compliance with security best practices
• Stay updated on emerging security threats, vulnerabilities, and technologies, advocating for proactive security measures
• Promote a security-first culture by mentoring engineers and driving security awareness initiatives

Qualifications:

Experience:

• 9+ years in application/product security or security engineering
• Proven experience in securing ERP systems, SaaS platforms, or similarly complex applications

Education:

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience)

Skills:

• Strong knowledge of security protocols, encryption technologies, and cybersecurity frameworks
• Strong grasp of the OSI model and how security applies at each layer
• Fluency with common AppSec tooling and techniques (e.g., Burp Suite, ZAP, CodeQL, Semgrep)
• Comfort with cloud securit