Senior Multi-Cloud Penetration Tester

Menlo Security, Inc.; Canada; On-site; CAD 158,000 - 237,000; Full time

Benefits offered by this job

Stock options

Growth opportunities

Job summary

Menlo Security, Inc. is seeking a forward-looking Security Engineer to lead offensive and defensive testing across AWS and GCP. You’ll review IAM, configurations, and orchestration layers, while triaging bug bounty submissions to keep pace with release velocity.

AI tools will accelerate reconnaissance and reporting within a fast-paced security team. You’ll collaborate with Cloud Security and Penetration Testing engineers to assess web apps, APIs, and container-based architectures, delivering

Qualifications

• Strong expertise across AWS and GCP with cloud security testing experience.
• Hands-on web app security testing, vulnerability discovery, and PoC development.
• Experience reviewing IAM configurations and cloud baselines.
• Proficiency in security automation using scripting languages.
• Excellent communication of risk to product teams.

Responsibilities

• Conduct deep-dive penetration tests across multi-cloud environments (AWS/GCP) with a peer pentester.
• Review cloud IAM policies, configurations, and permission structures for security baselines.
• Perform dynamic testing of web interfaces and APIs (Data/Web planes).
• Assess security of hybrid infrastructure including containers and VMs.
• Triage findings, produce reproducible PoCs, and guide remediation with product teams.
• Leverage AI/LLM tools to accelerate reconnaissance and reporting, with strong prompts.
• Monitor bug bounty pipelines and validate external vulnerability reports.

Skills

Multi-Cloud Fluency

Container Security

AI Tooling

Web Application Security

Security Automation

Infrastructure as Code

Communication

Tools

Burp Suite Pro

OWASP ZAP

Terraform

Job description

Menlo Security, Inc. is seeking a forward-looking Security Engineer to lead offensive and defensive testing across AWS and GCP. You’ll review IAM, configurations, and orchestration layers, while triaging bug bounty submissions to keep pace with release velocity.

AI tools will accelerate reconnaissance and reporting within a fast-paced security team. You’ll collaborate with Cloud Security and Penetration Testing engineers to assess web apps, APIs, and container-based architectures, delivering