← All roles

Senior Security Engineer - Pentester

Menlo Security· CISO-R&D
Apply on company site
RemoteCA$158k - CA$237kFull-timePosted 2mo ago

About the role

Security Engineer focused on offensive and defensive testing, penetration testing of product features, and cloud architecture across multi-cloud (AWS & GCP) environments. Works with AI/LLM tools to accelerate reconnaissance, generate attack vectors, analyze configurations, and draft vulnerability reports; collaborates with Penetration Testing and Cloud Security engineers to validate findings and drive remediation ahead of product releases.

Responsibilities

  • Conduct deep-dive penetration tests of products across a multi-cloud (AWS & GCP) environment, working in tandem with a peer pentester.
  • Review IAM policies, service configurations, and cloud-native permission structures across the Control Plane to ensure cloud configurations meet security baselines.
  • Execute dynamic testing against web interfaces and API endpoints (Data Plane & Web UI).
  • Assess the security posture of hybrid infrastructure spanning containers and virtual machines.
  • Triage findings, build clear and reproducible proofs-of-concept, and partner with product teams to explain risk and drive remediation.
  • Use AI and large language models to automate reconnaissance, generate attack vectors, analyze configurations, and draft vulnerability reports, applying strong prompt-engineering skills to security contexts.
  • Monitor bug bounty pipelines and external reports, validating findings and managing researcher communication.

Qualifications

  • Multi-Cloud Fluency: Deep architectural understanding of GCP and AWS. Capable of pivoting between providers, manual configuration reviews of IAM/Resource hierarchies, and using CSPM frameworks or native APIs.

Skills

Required:Multi-Cloud FluencyContainer SecurityAI ToolingWeb Application SecuritySecurity AutomationInfrastructure as CodeCommunication

Benefits

  • Stock-based compensation eligibility
  • Competitive total compensation package and base salary range provided in local currency
Last updated Aug 12, 2026. Interested? Apply on the company site.

About Menlo Security

Make Every Browser an Enterprise Browser | Menlo Security

The Menlo Security Enterprise Browser solution stops phishing and malware attacks on any browser and any device across your hybrid enterprise.

Browser SecurityEnterprise BrowserPhishing PreventionRansomwareZero-Trust Network AccessWeb SecurityCloud Browser
Company profileWebsite

More open roles at Menlo Security