Senior Security Engineer

About the role

Menlo Security is the leader in Browser Security for human and agentic workforces. Our mission is to enable humans and agents to connect, communicate, and collaborate securely, without compromise. The Menlo Browser Security Platform protects organizations from cyberattacks by stopping threats across the web, documents, and email before they reach the user. With Menlo Agent Runtime Security (MARS), that protection now extends to the AI agents working alongside every employee. Menlo Security is trusted by major global businesses, including Fortune 500 companies and government agencies, to protect their most valuable asset, their data, and is backed by top-tier investors.

ABOUT THE ROLE

The Senior Security Engineer role is for someone who builds. You will write detection logic, create automation, engineer security data pipelines, and develop tooling. The successful candidate will work closely with teams across Menlo to embed security best practices across all technology initiatives, and will be expected to lead incident response, conduct risk assessments, and support compliance alongside their engineering work. Menlo’s customers trust our platform to protect their environments. That trust depends in part on how well we protect our own.

RESPONSIBILITIES

-  Security Engineering & Automation - Build security automation using Python, Bash/Zsh, or similar to reduce manual workload and improve operational efficiency. - Write detection-as-code. Engineer data pipelines and integrations between security platforms. - Evaluate and implement security controls for AI systems, including agentic workflows, LLM integrations, and MCP-connected tooling. - Support network security initiatives, ensuring secure architecture and appropriate controls are maintained.

- Security Operations & Monitoring - Operate and evolve a modern, composable SIEM platform, improving every stage of the pipeline from ingestion to detection. - Monitor security alerts to identify, investigate, and respond to potential threats. - Administer and optimise EDR solutions (CrowdStrike) to ensure comprehensive endpoint protection across the organisation. - Lead incident response activities, including investigation, containment, remediation, and post-incident analysis.

- Vulnerability & Risk Management - Own the vulnerability management programme, automating scanning, prioritisation, and remediation tracking. - Conduct risk assessments and develop risk mitigation strategies in collaboration with stakeholders. - Implement and maintain CIS Benchmarks and similar baselines across systems and infrastructure to ensure secure configurations.

- Identity, Access & SaaS Security - Build and automate identity lifecycle processes (joiner, mover, leaver) and access reviews across Okta and SaaS applications. - Oversee SaaS security posture, including configuration reviews, access governance, and data protection controls. - Manage data loss prevention technologies (Code42, Google Workspace) to protect sensitive information and ensure compliance with data handling policies.