Principal Security Architect
Menlo Security15 hours ago
Remote, CanadaStaff+
Responsibilities
- Lead security design reviews covering product architecture, changes, and AWS cloud integrations.
- Conduct security code reviews and develop novel security-focused product features.
- Design and document enterprise Hardware Security Module and key-management integration and deployment processes.
- Assess third-party software, SaaS offerings, and their integrations in both design and implementation.
- Oversee internal and third-party security assessments and evaluate the impact of product and third-party vulnerabilities.
- Assess the security impact of emerging technologies, web standards, and browser behavior changes.
- Support compliance and sales teams with technical regulation and RFP input.
- Participate in detailed customer discussions on security topics.
- Assist with patent writing and review.
- Create and review external technical content, including blogs, white papers, and presentations.
Requirements
- Minimum MSc/MEng or equivalent; PhD preferred.
- Advanced knowledge of applied cryptography, including HSMs, TPMs, and key-management lifecycle activities.
- Deep knowledge of web and browser technologies, including Same Origin Policy, XSS, CSRF, HTTP security headers, browser architecture, and JavaScript engine internals.
- Thorough understanding of network and operating-system fundamentals, including TCP, HTTP, TLS, DNS, firewalls, WAFs, DAC/MAC, and sandboxing.
- AWS security experience, including IAM, Organizations, EC2, and VPC.
- Familiarity with static and dynamic analysis concepts and tools.
- Advanced C/C++ knowledge focused on secure coding, plus at least one additional language; Python or JavaScript preferred.
- Willingness to take a hands-on approach to completing the work.
Benefits
- Base salary range is CAD 158,000–263,000.
- Employees may be eligible for stock-based compensation grants and shareholder participation based on company and individual performance.
Tech Stack
Categories
About Menlo Security
Menlo Security builds a browser security platform for enterprises that manages and protects any browser, securing access to SaaS and private web apps and blocking web-, document-, and email-borne threats. The company sells subscription software and services to large organizations, and its customers include Fortune 500 companies and government agencies. Privately held and headquartered in Mountain View, California, Menlo also offers runtime security for AI agents through its MARS capability.