Senior Security Engineer

Overview

Senior Security Engineer role focused on building security tooling, automation and detection logic, working on-site at Menlo's Bengaluru office and with a global security team across Canada, the UK and India.

What you'll do

• Build security automation using Python, Bash/Zsh, or similar to reduce manual workload and improve operational efficiency.
• Write detection-as-code and engineer data pipelines and integrations between security platforms.
• Evaluate and implement security controls for AI systems, including agentic workflows, LLM integrations, and MCP-connected tooling.
• Support network security initiatives, ensuring secure architecture and appropriate controls are maintained.
• Operate and evolve a modern, composable SIEM platform, improving every stage of the pipeline from ingestion to detection.
• Monitor security alerts to identify, investigate, and respond to potential threats.
• Administer and optimise EDR solutions (CrowdStrike) to ensure comprehensive endpoint protection across the organisation.
• Lead incident response activities, including investigation, containment, remediation, and post-incident analysis.
• Own the vulnerability management programme, automating scanning, prioritisation, and remediation tracking.
• Conduct risk assessments and develop risk mitigation strategies in collaboration with stakeholders.
• Implement and maintain CIS Benchmarks and similar baselines across systems and infrastructure to ensure secure configurations.
• Build and automate identity lifecycle processes (joiner, mover, leaver) and access reviews across Okta and SaaS applications.
• Oversee SaaS security posture, including configuration reviews, access governance, and data protection controls.
• Manage data loss prevention technologies (Code42, Google Workspace) to protect sensitive information and ensure compliance with data handling policies.
• Act as the on-site security representative within Menlo's Bengaluru office, working with a global security team across Canada, the UK, and India.
• Provide security guidance and consultancy to IT and other Menlo teams on projects and initiatives.
• Develop, document, and maintain security policies, standards, processes, and playbooks.
• Stay current with emerging threats, vulnerabilities, and security technologies to continuously improve the organisation's security posture.

What you'll need

• Bachelor's degree in Cybersecurity, Computer Science, or Information Technology, or relevant certifications (CISSP, CCSP, Security+, or similar), and/or minimum of 5-8 years' experience in security engineering or adjacent roles.
• Hands-on experience building on SIEM platforms (log ingestion, parsing, detection rules), EDR solutions (ideally CrowdStrike), and vulnerability management tools.
• Proficiency in Python, Bash, Zsh, or similar for security automation.
• Ability to demonstrate security tooling, automation, or detection logic they have built.
• Experience with IAM solutions, SaaS security, and data protection tools.
• Strong understanding of networking concepts, protocols, and security architecture.
• Excellent analytical, problem-solving, and communication skills.

Nice to have

• Strong understanding of cloud security concepts.
• Flexibility to work a Sunday to Thursday schedule, after ramping up, to align with team members in regions with a Sunday to Thursday working week.

Details

• Full-time position based in Bengaluru, India, with hybrid working and in-office presence required 3-4 days per week.
• Occasional out-of-hours support coverage and APAC-hours on-call rotation, as required.