Pro members applied to this job 36 hours before you saw itGet Pro ›

Security Engineer

Menlo SecurityUnited States$105k - $185k+ Equity6d ago

In Office NA Cloud Computing Public Sector Security Engineer Bash Python Go GCP AWS

Upload My Resume

Drop here or click to browse · PDF, DOCX, DOC, RTF, TXT

Apply in One Click

Requirements

• ● Multi-Cloud Fluency: Deep architectural understanding of GCP and AWS, with the ability to manage complex IAM policies, standardizing identity, and securing networking layers across both providers. • Multi-Cloud Fluency: • ● Security Automation: Proficiency in Python, Go, or Bash to write custom scripts that eliminate toil, build auto-remediation playbooks, and streamline security operations. ● Infrastructure as Code (IaC): Experience developing secure Terraform modules and primitives for the organization to stem from, ensuring security defaults are baked into the architecture and catching misconfigurations before deployment. • Security Automation: • Infrastructure as Code (IaC) • ● Developer Enablement: Design and maintain shared CI/CD security components (SAST/SBOM/Container Scanning) that are easily adoptable by engineering teams with minimal friction. • ● Container Security: Proven experience securing managed (EKS, GKE) and unmanaged container workloads, with a strong emphasis on automating runtime defenses and admission controllers. • Container Security: • ● Pragmatic Mindset: The ability to operate pragmatically within a lean team, knowing how to prioritize risk based on runtime context and business impact rather than just chasing scanner outputs. • Pragmatic Mindset: • ● Privileged Access Management: Proven ability to implement and manage Just-In-Time access policies to replace manual ticket and eliminating standing privileges. • Privileged Access Management: • ● Federal Compliance & Citizenship: Due to the role’s involvement in federal compliance activities, the candidate is required to be a US citizen. • Federal Compliance & Citizenship • US citizen. • ● Orchestration & Event-Driven Automation Expert: Proven experience designing and deploying fully automated security systems using AWS Step Functions or Google Cloud Workflows. You have a track record of building event-driven architectures that orchestrate complex, multi-stage security workflows such as automatically triggering vulnerability scans upon resource creation, aggregating and filtering reporting data, and routing high-fidelity, actionable alerts to Slack, Grafana, and other external platforms. • Orchestration & Event-Driven Automation Expert: • ● Performance-Aware Security Engineering: Experience troubleshooting and tuning security agent performance to balance deep visibility with system stability, specifically preventing CPU/Memory exhaustion in high-traffic proxy environments. • Performance-Aware Security Engineering: • ● Linux Security: Understanding of Linux security primitives, specifically the use of MAC (Mandatory Access Control) like AppArmor or SELinux, DAC (Discretionary Access Control), and Linux kernel capabilities • Linux Security:

Responsibilities

• ● Multi-Cloud Governance (AWS & GCP): Deploy and manage Cloud Security Posture Management (CSPM) tools to automatically detect and remediate misconfigurations across both providers. • Multi-Cloud Governance (AWS & GCP): • ● Container Security Lifecycle: Implement Cloud Native Application Protection Platform (CNAPP) strategies by shifting left and integrating container image scanning directly into Jenkins and GitLab pipelines. • Container Security Lifecycle: • ● Workload Protection: Deploy and tune Cloud Workload Protection Platform (CWPP) tools to monitor runtime behavior and detect anomalies in both VMs and Kubernetes pods. ● Advanced Automation & SOAR: Build Automated Response Playbooks to automatically enrich alerts, isolate compromised resources, and dismiss low-fidelity noise without human intervention. • Workload Protection: • Advanced Automation & SOAR: • ● Infrastructure Review & Identity: Manage effective permissions across complex multi-cloud IAM structures and standardize secret management workflows. ● Release Readiness & Customer Trust: Collaborate closely with Technical Program Managers (TPMs) during software releases to enforce compliance standards and oversee vulnerability scanning. Additionally, respond to customer inquiries regarding the impact of Common Vulnerabilities and Exposures (CVEs) on our product. • Infrastructure Review & Identity: • Release Readiness & Customer Trust:

Benefits

• At Menlo Security, Base Salary is one part of our competitive total compensation and benefits package and is determined using a salary range. The base salary range for this role is $105,000 - $185,000. • In accordance with NY, CO, CA, and WA law, the range provided is Menlo Security’s reasonable estimate of the base compensation for this role. The actual amount may be higher or lower, based on non-discriminatory factors such as experience, knowledge, skills, abilities, and location. All employees may be eligible to become Menlo Security shareholders through eligibility for stock-based compensation grants, which are awarded to employees based on company and individual performance. • Menlo Security does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of Menlo Security. • Our culture is collaborative, inclusive, and fun! We have five core values: Stay Aligned, Get It Done, Customer Empathy, Think Creatively and Help Each Other Out. We believe in open communication, supporting new ideas, and sharing a mutual mindset of what we’re aiming to achieve together. There are tremendous opportunities to take initiative, implement new ideas, and have a hand in building a legacy.