Senior Security Engineer focusing on offensive and defensive security at Menlo Security. Conducting penetration testing and ensuring cloud architecture security in multi-cloud environments.
Responsibilities
Collaborative Penetration Testing (AWS & GCP): Work in tandem with a peer pentester to conduct deep-dive penetration tests of our products across our multi-cloud environment.
Control Plane: Review IAM policies, service configurations, and cloud-native permission structures.
Data Plane & Web UI: Execute dynamic testing against web interfaces and API endpoints.
Infrastructure Review: Assess the security posture of a hybrid infrastructure that mixes containers and Virtual Machines (VMs) infrastructures.
AI-Augmented Security Assessments: Actively utilize AI and Large Language Models (LLMs) to automate reconnaissance, generate attack vectors, analyze configurations, and draft vulnerability reports.
Pipeline Management: Monitor bug bounty pipelines and external reports, validating findings and managing researcher communication.
Requirements
Multi-Cloud Fluency: Demonstrate a deep architectural understanding of GCP and AWS.
Container Security: Proven experience auditing and hardening managed container services (GKE Autopilot/Standard, EKS, ECS) and self-hosted/unmanaged workloads (K8s, k3s, OCI-runc).
AI Tooling: Demonstrated ability to integrate AI/LLM tools (e.g., Gemini, Claude) into the pentesting lifecycle to increase speed and coverage.
Web Application Security: Expert-level knowledge of web application security principles and offensive testing methodologies, with deep proficiency in OWASP Top 10 vulnerabilities, modern web framework exploitation, and API security (REST, WebSockets). Extensive hands-on experience conducting manual security assessments using Burp Suite Professional, OWASP ZAP, or similar tooling.
Security Automation: Proficiency in Python, Go, or Bash to eliminate "toil."
Infrastructure as Code: Solid grasp of Terraform and cloud-native deployment patterns.
Benefits
All employees may be eligible to become Menlo Security shareholders through eligibility for stock-based compensation grants, which are awarded to employees based on company and individual performance.
Entry - level Quality Engineer at Celestica, responsible for quality standards in manufacturing processes. Engaging in ISO compliance, supply chain management, and process documentation.
Senior Quality Assurance role leading and mentoring the QA team while ensuring software reliability. Join a remote - first consultancy aiming to challenge software industry norms.
Freelance software tester in Canada for a globally known e - commerce website. Focused on identifying issues with the checkout flow and payment process.
Software QA Analyst ensuring quality, reliability, and usability in building automation software products. Collaborating with teams to shape testing strategies and improve QA practices.
QA Analyst I testing software products at JANA, responsible for executing manual tests and collaborating with development teams. Engages in test automation and quality assurance processes.
QA Lead responsible for writing automation and improving QA practices at InnoSoft Canada. Collaborating closely with engineering and product teams to enhance overall quality processes.
Quality Assurance Consultant applying GMP knowledge to pharmaceutical consulting projects. Managing compliance, quality systems, and audits while working within a collaborative team environment in Canada.
QA Lead at InnoSoft Canada developing test automation across Fusion product suite. Leading QA practices and assessing test coverage for quality improvements.
Senior Mobile Quality Engineer at CBC focusing on quality across mobile platforms. Collaborating with teams to enhance mobile app testing and architecture development.