← All roles

Principal Security Architect

Menlo Security· R&D - Product - Product Security - R104
Apply on company site
RemoteCA$158k - CA$263kFull-timePosted 3w ago

About the role

Security Architect for enterprise-grade browser security platform, focusing on design reviews, cryptography, cloud integration, third-party assessments, and developing security features.

Responsibilities

  • Security Design reviews, both broad product architecture and more minor changes. Includes integration/interaction with Cloud infrastructure (AWS).Security Code reviews.
  • Designing and documenting the process of integration and deployment of enterprise Hardware Security Module and Key Management.
  • Conducting assessments of third party software / SaaS offerings.
  • Conducting assessments of integration with third party software / SaaS, both design and actual implementation.
  • Overseeing internal and third party security assessments.
  • In-depth assessment of vulnerability impact, both third party vulnerabilities and product vulnerabilities.
  • Keeping abreast of and assessing product impact of upcoming technologies (e.g., new web standard or browser behavior changes).
  • Assisting compliance and sales teams on technical aspects of regulations / RFPs
  • Participating in in-depth technical conversations with customers around security topics.
  • Assisting with patent writing and review.
  • Creating and reviewing technical material meant for external consumption, both written (blogs, white papers...) and oral (presentations…).
  • Developing novel product features in the security space.

Qualifications

  • Advanced knowledge of applied cryptography (e.g. HSMs, TPMs) and Key Management Life Cycle (e.g. Key Generation, Storage, Distribution, Backup, Rotation, Revocation, Destruction)
  • Deep knowledge of web and browser technologies: Same Origin Policy, XSS, CSRF, HTTP security headers, browser architecture, JavaScript engine internals.
  • Thorough understanding of network and OS fundamentals: TCP, HTTP, TLS, DNS, Firewalls, WAFs…; DAC/MAC, Sandboxing.
  • AWS security experience: IAM, Organizations, EC2, VPC...
  • Familiarity with static and dynamic analysis concepts and tools.
  • Advanced knowledge of C/C++, with focus on secure coding, and at least one other language (Python or JS preferred).
  • Willingness to get your hands dirty to get things done.
  • Minimum MSc/MEng or equivalent, PhD preferred.

Skills

Required:Advanced cryptographySame Origin Policy, XSS, CSRFNetwork and OS fundamentalsAWS securitySecure coding (C/C++)
Nice to have:Static and dynamic analysis

Benefits

  • Base Salary is one part of our competitive total compensation and benefits package and is determined using a salary range.
Last updated Oct 1, 2026. Interested? Apply on the company site.

About Menlo Security

Make Every Browser an Enterprise Browser | Menlo Security

The Menlo Security Enterprise Browser solution stops phishing and malware attacks on any browser and any device across your hybrid enterprise.

Browser SecurityEnterprise BrowserPhishing PreventionRansomwareZero-Trust Network AccessWeb SecurityCloud Browser
Company profileWebsite

More open roles at Menlo Security