Latest AI JobsBrowse Jobs
Menlo Security logo

Senior Security Engineer - Pentester

Menlo SecurityAMER - CanadaCISO-R&D
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Posted
3 Aug 2026
Status
Open · checked 8d ago

About this role

Role Overview

The Senior Security Engineer - Pentester position at Menlo Security is a remote role based in Canada focused on offensive and defensive testing, product penetration testing, and cloud architecture security. This opportunity suits an experienced security professional who thrives in a fast-paced multi-cloud environment and wants to leverage AI tooling to accelerate testing velocity.

Key Responsibilities

Conduct deep-dive penetration tests across a multi-cloud environment spanning AWS and GCP in collaboration with peer penetration testers.
Review IAM policies, service configurations, and cloud-native permission structures across the Control Plane to verify security baselines.
Execute dynamic testing against web interfaces and API endpoints across data planes and web user interfaces.
Assess the security posture of hybrid infrastructure that includes both containers and virtual machines.
Triage security findings, build clear and reproducible proofs-of-concept, and partner with product engineering teams to explain risk and drive remediation.
Utilize AI and large language models to automate reconnaissance, generate attack vectors, analyze configurations, and draft vulnerability reports.
Monitor bug bounty pipelines and external vulnerability reports, validate findings, and manage researcher communications.

Requirements

Multi-Cloud Fluency with a deep architectural understanding of GCP and AWS, manual configuration review capabilities, and experience with CSPM frameworks.
Container Security expertise auditing and hardening managed container services such as GKE and EKS alongside unmanaged workloads like Kubernetes.
Proven ability to integrate AI and LLM tools into the penetration testing lifecycle to increase speed and test coverage.
Expert-level knowledge of web application security principles, OWASP Top 10 vulnerabilities, API security, and manual testing using Burp Suite or OWASP ZAP.
Proficiency in programming languages such as Python, Go, or Bash to automate vulnerability discovery and streamline workflows.
Solid grasp of Terraform and cloud-native deployment patterns to audit HCL files for misconfigurations.
Strong technical writing and communication skills to produce high-quality vulnerability reports for product teams.

Nice to Have

Experience working with Gatekeeper policies and Binary Authorization.

Skills and Tools

Python
AWS
GCP
LLM
Terraform
Burp Suite Professional
OWASP ZAP
Kubernetes
IAM Policies

Salary and Benefits

Base salary range of 158,000 CAD to 237,000 CAD, determined by non-discriminatory factors such as experience, knowledge, skills, and location.
Eligibility for stock-based compensation grants tied to company and individual performance.

About the Company

Menlo Security is a leader in browser security for human and agentic workforces, protecting organizations from cyberattacks across the web, documents, and email. The company is trusted by major global businesses, including Fortune 500 companies and government agencies, and is backed by top-tier investors.

How to Apply

Candidates should apply directly on the official Menlo Security careers page through their application portal.

Skills and tech stack

PythonAWSGCPLLMTerraform

Questions candidates ask

Is this position remote?

Yes, this role is remote and designated for candidates located in Canada (AMER - Canada).

What is the salary range for the Senior Security Engineer role?

The base salary range is between 158,000 CAD and 237,000 CAD, depending on factors such as experience, knowledge, skills, and location.

What cloud platforms are involved in this role?

The position involves working across a complex multi-cloud environment utilizing both AWS and GCP.

What role do AI and LLMs play in this job?

AI and large language models are used day-to-day to accelerate reconnaissance, generate attack vectors, analyze configurations, and draft vulnerability reports.

Are equity or stock options available?

Yes, employees may be eligible for stock-based compensation grants based on company and individual performance.

Ready to apply?

The application is on the official Menlo Security careers page.

Apply on company site