Principal Security Architect

Join Menlo Security, the leader in Browser Security, as a Principal Security Architect. In this role, you will be responsible for conducting security design reviews, assessing third-party software, overseeing internal and third-party security assessments, and developing novel product features in the security space. You will also assist compliance and sales teams on technical aspects of regulations and participate in technical conversations with customers around security topics. A strong background in security, programming, and cloud infrastructure is required.

Responsibilities

• Participating in security design reviews, conducting assessments of third-party software, and overseeing internal and third-party security assessments.
• Designing and documenting the process of integration and deployment of enterprise Hardware Security Module and Key Management.
• Creating and reviewing technical material meant for external consumption, both written and oral, and assisting with patent writing and review.

Requirements

• AWS security experience: IAM, Organizations, EC2, VPC..
• Advanced knowledge of C/C++, with focus on secure coding, and at least one other language (Python or JS preferred)
• Familiarity with static and dynamic analysis concepts and tools
• Willingness to get your hands dirty to get things done

Minimum MSc/MEng or equivalent, PhD preferred

• Thorough understanding of network and OS fundamentals: TCP, HTTP, TLS, DNS, Firewalls, WAFs…; DAC/MAC, Sandboxing
• Deep knowledge of web and browser technologies: Same Origin Policy, XSS, CSRF, HTTP security headers, browser architecture, JavaScript engine internals
• Advanced knowledge of applied cryptography (e.g. HSMs, TPMs) and Key Management Life Cycle (e.g. Key Generation, Storage, Distribution, Backup, Rotation, Revocation, Destruction)