Principal Security Architect

Contract type
Ongoing
Work mode
Remote
Experience
Lead / principal · Not stated

Level inferred from job title

Job description

Security engineering role at Menlo Security focused on security design and code reviews, cryptography and key management, third-party and vulnerability assessments, and developing security product features.

At a glance

Employment
Full-time · Employee (employment agreement)
Work mode
Remote
Pay
CAD 158,000 – 263,000 / year

What you'll do

  • Security Design reviews, both broad product architecture and more minor changes, including integration/interaction with Cloud infrastructure (AWS)
  • Security Code reviews
  • Designing and documenting the process of integration and deployment of enterprise Hardware Security Module and Key Management
  • Conducting assessments of third party software / SaaS offerings
  • Conducting assessments of integration with third party software / SaaS, both design and actual implementation
  • Overseeing internal and third party security assessments
  • In-depth assessment of vulnerability impact, both third party vulnerabilities and product vulnerabilities
  • Keeping abreast of and assessing product impact of upcoming technologies (e.g., new web standard or browser behavior changes)
  • Assisting compliance and sales teams on technical aspects of regulations / RFPs
  • Participating in in-depth technical conversations with customers around security topics
  • Assisting with patent writing and review
  • Creating and reviewing technical material meant for external consumption, both written (blogs, white papers...) and oral (presentations)
  • Developing novel product features in the security space

What we're looking for

  • Advanced knowledge of applied cryptography (e.g. HSMs, TPMs) and Key Management Life Cycle (e.g. Key Generation, Storage, Distribution, Backup, Rotation, Revocation, Destruction)
  • Deep knowledge of web and browser technologies: Same Origin Policy, XSS, CSRF, HTTP security headers, browser architecture, JavaScript engine internals
  • Thorough understanding of network and OS fundamentals: TCP, HTTP, TLS, DNS, Firewalls, WAFs; DAC/MAC, Sandboxing
  • AWS security experience: IAM, Organizations, EC2, VPC
  • Familiarity with static and dynamic analysis concepts and tools
  • Advanced knowledge of C/C++, with focus on secure coding, and at least one other language (Python or JS preferred)
  • Willingness to get your hands dirty to get things done
  • Minimum MSc/MEng or equivalent

Nice to have

  • PhD preferred

Benefits

  • Base salary range 158,000 CAD - 263,000 CAD
  • Eligibility for stock-based compensation grants, awarded based on company and individual performance

Apply

About Menlo Security

The leader in Browser Security for human and agentic workforces

Menlo Security protects organizations from cyberattacks by stopping threats across the web, documents, and email before they reach the user. With Menlo Agent Runtime Security (MARS), that protection now extends to the AI agents working alongside every employee.

Mission

To enable humans and agents to connect, communicate, and collaborate securely, without compromise

Key facts

  • Browser Security
  • Trusted by major global businesses, including Fortune 500 companies and government agencies
  • Backed by top-tier investors
  • Menlo Browser Security Platform protects against threats across the web, documents, and email
  • Menlo Agent Runtime Security (MARS) extends protection to AI agents

What they value

  • Proactive Leadership
  • Straight Talk
  • United Impact
  • Elevated Talent
  • Customer-Compelled