Senior Security Engineer - Pentester
Menlo SecurityBrowser Security company
Canada158,000 CAD - 237,000 CADSenior
General Catalyst
J.P. Morgan
Sutter Hill Ventures
Vista Equity Partners
Engineering Capital
HSBC
Software Engineering
About the role
TL;DR
Senior Security Engineer focused on penetration testing of product features and cloud architecture.
- •Menlo Security is seeking a forward-thinking Security Engineer focused on offensive and defensive testing, penetration testing of product features, and the cloud architecture.
- •You will operate across a complex multi-cloud environment (AWS & GCP) and partner with fellow Penetration Testing and Cloud Security engineers.
- •Key Responsibilities Conduct deep-dive penetration tests of products across a multi-cloud (AWS & GCP) environment.
- •Review IAM policies, service configurations, and cloud-native permission structures.
- •Execute dynamic testing against web interfaces and API endpoints.
- •Triage findings, build clear and reproducible proofs-of-concept, and partner with product teams to explain risk.
- •Use AI and large language models to automate reconnaissance, generate attack vectors, and analyze configurations.
- •Requirements Deep architectural understanding of GCP and AWS.
- •Proven experience auditing and hardening managed container services.
- •Demonstrated ability to integrate AI/LLM tools into the pentesting lifecycle.
- •Expert-level knowledge of web application security principles and offensive testing methodologies.
- •Proficiency in Python, Go, or Bash for security automation.
Required skills
AWSGoogle CloudKubernetesDockerPythonGoBashTerraformOWASPOAuthJWTIAMREST APIWebSocketsPenetration Testing
Nice-to-have skills
Gemini APIAnthropic APILangChain
Domain expertise
cybersecurity
Benefits & perks
Equity, Stock-based compensation
Tech stack
AWSGoogle CloudKubernetesDockerPythonGoBashTerraformOWASPOAuthJWTIAMREST APIWebSocketsGemini APIAnthropic APILangChain