MS
Senior Security Engineer - Pentester
Menlo Security
158.000–237.000 CA$ pro Jahr · Remote · Kanada und Vereinigte Staaten
The browser is the new attack surface. Menlo Security builds its entire operation around that premise, delivering a cloud-based platform designed to turn any browser into a hardened enterprise endpoint. The core threat model targets the sophisticated, evasive attacks - often called Highly Evasive Adaptive Threats (HEAT) - that slip past traditional network and endpoint defenses by exploiting the browser session itself. Their flagship product, Menlo Protect HEAT Shield AI, uses AI-driven analysis to intercept and neutralize these threats at the browser layer. The approach is isolation-first, creating a secure execution environment in the cloud that processes web content before it ever reaches the user's device or corporate network. This isn't a bolt-on filter; it's a fundamental re-architecture of how web traffic is handled for enterprise security. The operational scale is concrete: the company counts Fortune 500 corporations among its clientele, including 8 of the world's 10 largest banks. Its technical domains span browser security, cloud-native architecture, AI-driven threat prevention, and the broader cloud security stack. The work targets sectors where the stakes are highest - financial services, healthcare, critical infrastructure, and federal agencies - building defenses for environments where a single compromised browser session can cascade into a systemic failure.
The browser is the new attack surface. Menlo Security builds its entire operation around that premise, delivering a cloud-based platform designed to turn any browser into a hardened enterprise endpoint. The core threat model targets the sophisticated, evasive attacks - often called Highly Evasive Adaptive Threats (HEAT) - that slip past traditional network and endpoint defenses by exploiting the browser session itself.
Their flagship product, Menlo Protect HEAT Shield AI, uses AI-driven analysis to intercept and neutralize these threats at the browser layer. The approach is isolation-first, creating a secure execution environment in the cloud that processes web content before it ever reaches the user's device or corporate network. This isn't a bolt-on filter; it's a fundamental re-architecture of how web traffic is handled for enterprise security.
The operational scale is concrete: the company counts Fortune 500 corporations among its clientele, including 8 of the world's 10 largest banks. Its technical domains span browser security, cloud-native architecture, AI-driven threat prevention, and the broader cloud security stack. The work targets sectors where the stakes are highest - financial services, healthcare, critical infrastructure, and federal agencies - building defenses for environments where a single compromised browser session can cascade into a systemic failure.