Senior Security Engineer

Location: APAC - Distributed (India)
Department: G&A

Menlo Security is the leader in Browser Security for human and agentic workforces. Our mission is to enable humans and agents to connect, communicate, and collaborate securely, without compromise. The Menlo Browser Security Platform protects organizations from cyberattacks by stopping threats across the web, documents, and email before they reach the user. With Menlo Agent Runtime Security (MARS), that protection now extends to the AI agents working alongside every employee. Menlo Security is trusted by major global businesses, including Fortune 500 companies and government agencies, to protect their most valuable asset, their data, and is backed by top-tier investors.

About the Role

The Senior Security Engineer role is for someone who builds. You will write detection logic, create automation, engineer security data pipelines, and develop tooling. The successful candidate will work closely with teams across Menlo to embed security best practices across all technology initiatives, and will be expected to lead incident response, conduct risk assessments, and support compliance alongside their engineering work. Menlo’s customers trust our platform to protect their environments. That trust depends in part on how well we protect our own. 

Responsibilities

•  Security Engineering & Automation

  • Build security automation using Python, Bash/Zsh, or similar to reduce manual workload and improve operational efficiency.

  • Write detection-as-code. Engineer data pipelines and integrations between security platforms.

  • Evaluate and implement security controls for AI systems, including agentic workflows, LLM integrations, and MCP-connected tooling.

  • Support network security initiatives, ensuring secure architecture and appropriate controls are maintained.

• Security Operations & Monitoring

  • Operate and evolve a modern, composable SIEM platform, improving every stage of the pipeline from ingestion to detection.

  • Monitor security alerts to identify, investigate, and respond to potential threats.

  • Administer and optimise EDR solutions (CrowdStrike) to ensure comprehensive endpoint protection across the organisation.

  • Lead incident response activities, including investigation, containment, remediation, and post-incident analysis.

• Vulnerability & Risk Management

  • Own the vulnerability management programme, automating scanning, prioritisation, and remediation tracking.

  • Conduct risk assessments and develop risk mitigation strategies in collaboration with stakeholders.

  • Implement and maintain CIS Benchmarks and similar baselines across systems and infrastructure to ensure secure configurations.

• Identity, Access & SaaS Security

  • Build and automate identity lifecycle processes (joiner, mover, leaver) and access reviews across Okta and SaaS applications.

  • Oversee SaaS security posture, including configuration reviews, access governance, and data protection controls.

  • Manage data loss prevention technologies (Code42, Google Workspace) to protect sensitive information and ensure compliance with data handling policies.

• Policy, Process & Advisory

  • Act as the on-site security representative within Menlo’s Bengaluru office, working with a global security team across Canada, the UK, and India.

  • Provide security guidance and consultancy to IT and other Menlo teams on projects and initiatives.

  • Develop, document, and maintain security policies, standards, processes, and playbooks.

  • Stay current with emerging threats, vulnerabilities, and security technologies to continuously improve the organisation's security posture.

Requirements

• The successful candidate will have some combination of the following education and experience:

  • Bachelor's degree in Cybersecurity, Computer Science, or Information Technology,

  • Relevant certifications (CISSP, CCSP, Security+, or similar), and/or

  • Minimum of 5-8 years' experience in security engineering or adjacent roles.

• Hands-on experience building on SIEM platforms (log ingestion, parsing, detection rules), EDR solutions (ideally CrowdStrike), and vulnerability management tools.

• Proficiency in Python, Bash, Zsh, or similar for security automation is required. Candidates should be able to demonstrate security tooling, automation, or detection logic they have built.

• Experience with IAM solutions, SaaS security, and data protection tools.

• Strong understanding of networking concepts, protocols, and security architecture.

• Excellent analytical, problem-solving, and communication skills.

• Strong understanding of cloud security concepts is beneficial.

Working Conditions

• Full-time position with occasional out-of-hours support coverage, as well as APAC-hours on-call rotation, as required.

• Location: Bengaluru, India. Hybrid working arrangement with in-office presence required 3-4 days per week.

• Flexibility to work a Sunday to Thursday schedule, after ramping up, is a plus, to align with team members in regions with a Sunday to Thursday working week.

MSGL-I4

Follow us on LinkedIn!

Why Menlo?

At Menlo, we don't settle for the status quo — in our technology or our culture. How we think and act is just as important as what we build. Our culture is defined by five core mindsets: Proactive Leadership, Straight Talk, United Impact, Elevated Talent, and Customer-Compelled. We take ownership and drive outcomes without waiting to be told. We communicate directly and seek hard truths. We break down silos and win together. We hold a high bar for ourselves and the people around us. And we treat every customer interaction as mission-critical. If you're someone who sees it, owns it, solves it, and does it — you'll thrive here.

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.

TO ALL AGENCIES: Please, no phone calls or emails to any employee of Menlo Security outside of the Talent organization. Menlo Security’s policy is to only accept resumes from agencies via Ashby (ATS). Agencies must have a valid services agreement executed and must have been assigned by the Talent team to a specific requisition. Any resume submitted outside of this process will be deemed the sole property of Menlo Security. In the event a candidate submitted outside of this policy is hired, no fee or payment will be paid.