Principal Security Architect

🔥 12 hours ago

🇨🇦 Canada – Remote

💵 $158k - $263k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Menlo Security Inc.

WebsiteLinkedInAll Job Openings

201 - 500 employees

🔒 Cybersecurity

🏢 Enterprise

💰 $100M Series E on 2020-11

Cybersecurity • Enterprise

Menlo Security Inc. is a cybersecurity company focused on providing advanced internet security solutions for enterprises. They specialize in securing browsers across hybrid enterprise environments to prevent phishing and malware attacks. Menlo Security offers a cloud-based browser security solution that transforms any browser into a secure enterprise browser, helping organizations protect against highly evasive adaptive threats, zero-hour phishing, and ransomware. Their zero-trust access architecture enables safe internet use and secure application access, supporting over 800 customers globally, including financial institutions and government agencies.

📋 Description

• Conduct security design reviews for broad product architecture and minor changes, including AWS cloud infrastructure integrations and interactions • Conduct security code reviews • Design and document integration and deployment processes for enterprise Hardware Security Modules and Key Management • Assess third-party software and SaaS offerings • Assess designs and implementations integrating third-party software and SaaS • Oversee internal and third-party security assessments • Assess the impact of third-party and product vulnerabilities in depth • Monitor and assess product impact from emerging technologies, new web standards, and browser behavior changes • Assist compliance and sales teams with technical aspects of regulations and RFPs • Participate in technical security discussions with customers • Assist with patent writing and review • Create and review external technical materials, including blogs, white papers, and presentations • Develop novel security-focused product features

🎯 Requirements

• Advanced knowledge of applied cryptography, including HSMs and TPMs • Knowledge of the Key Management Life Cycle, including key generation, storage, distribution, backup, rotation, revocation, and destruction • Deep knowledge of web and browser technologies, including Same Origin Policy, XSS, CSRF, HTTP security headers, browser architecture, and JavaScript engine internals • Thorough understanding of network and OS fundamentals, including TCP, HTTP, TLS, DNS, firewalls, WAFs, DAC/MAC, and sandboxing • AWS security experience, including IAM, Organizations, EC2, and VPC • Familiarity with static and dynamic analysis concepts and tools • Advanced knowledge of C/C++ with a focus on secure coding • Knowledge of at least one other language; Python or JavaScript preferred • Willingness to get hands-on to get things done • Minimum MSc/MEng or equivalent; PhD preferred

🏖️ Benefits

• Eligibility for stock-based compensation grants based on company and individual performance • Competitive total compensation and benefits package