Senior Security Engineer - Pentester
Menlo Security · Remote · AMER - Canada ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior Security Engineer
- Fully remote
- AWS & GCP focus
- AI-assisted pentesting
- Container security
Join the security team at Menlo Security to protect human and agentic workforces through rigorous offensive and defensive testing. You will assess product features and multi-cloud infrastructure before release, triage bug bounty submissions, and leverage AI to enhance security assessments.
What you'll do
- Conduct deep-dive penetration tests across AWS and GCP environments
- Review IAM policies and cloud configurations against security baselines
- Execute dynamic testing on web interfaces and API endpoints
- Triage bug bounty submissions and validate external vulnerability reports
- Use AI and LLMs to automate reconnaissance and draft reports
- Partner with product teams to explain risk and drive remediation
What you'll need
- Deep architectural understanding of GCP and AWS
- Experience auditing managed and unmanaged container services
- Proficiency in integrating AI/LLM tools into pentesting workflows
- Expert knowledge of OWASP Top 10 and API security
- Strong skills in Python, Go, or Bash for security automation
- Ability to interpret and audit Terraform HCL files
- Excellent technical writing and communication skills
Nice to have
- Experience with Gatekeeper policies
- Knowledge of Binary Authorization
Stack
- AWS
- GCP
- Kubernetes
- Terraform
- Python
- Go
- Bash
- Burp Suite
- OWASP ZAP
What you get
- Competitive base salary range
- Eligibility for stock-based compensation grants
- Equal opportunity employer