Principal Engineer (Fintech) (w/m/d)

Menlo Security's mission is enabling the world to connect, communicate and collaborate securely without compromise. COVID-19 has made our mission all the more real. We are growing from 400 employees into the next phase of our journey, and we need passionate talent filled with empathy and agility. The right candidate for the job is ethical, hyper-organized, fanatical about seeing things through to completion, service-oriented, and humble enough to take feedback and coaching yet confident enough to provide feedback and coaching.

Menlo Security is seeking a Principal Software Engineer I for the R&D Policy Team. This team owns the full lifecycle of Menlo’s cybersecurity policy platform — the engine that defines how the product protects enterprise customers from web-based threats. That spans policy storage and management (authoring, versioning, and serving the rules that govern customer security posture), policy distribution (propagating policy changes reliably and at scale to enforcement points globally), and real-time enforcement (applying policies at traffic inspection time to block, isolate, or allow web activity). You will architect critical services across this stack, lead cross-functional initiatives, and help shape how the team builds software in an era where AI is a first-class engineering tool.

Responsibilities include:

• Architect, design, and own services across the policy platform — from policy storage and versioning APIs, to the distribution pipeline that propagates rule changes to enforcement nodes, to the enforcement layer that applies policies at inspection time with low latency and high availability.
• Evaluate the current state of policy management, distribution, and enforcement; lead design reviews and gain consensus on architectural decisions within the Policy Team.
• Champion AI-assisted development practices (LLM-based coding assistants, automated test generation) and identify opportunities to embed ML/AI into policy features such as intelligent policy recommendations or anomaly-based threat detection.
• Own complex projects end-to-end — requirements through deployment and monitoring — breaking work into well-scoped tasks for junior engineers and unblocking teammates to maintain velocity.
• Produce accurate estimates and surface risks early.

Qualifications:

• 8+ years of hands-on backend development in Python, Node.js, or Go; 5+ years with cloud platforms (AWS or GCP), including managed Kubernetes (EKS/GKE).
• Proven experience architecting distributed systems with strong reliability, scalability, and low-latency requirements — ideally in a security, networking, or high-throughput data path context.
• Hands-on experience developing, debugging, and troubleshooting backend services in Linux environments; working knowledge of networking fundamentals (TCP/IP, TLS, DNS, proxying) relevant to policy enforcement work.
• Experience with policy or rules engines, configuration distribution systems, or real-time traffic inspection is a strong plus.
• Demonstrated experience designing and executing large-scale data or schema migrations in live production systems — ideally with multi-tenant, zero-downtime, and behavioral-equivalence requirements.
• Proficiency with data storage and analytics technologies such as Redis, PostgreSQL, MySQL, and Apache Druid or similar OLAP systems.
• Experience with web security — URL classification, content filtering, or threat intelligence — is highly desirable.
• B.S. in Computer Science or related field required.

There are tremendous opportunities to take initiative, implement new ideas, and have a hand in building a legacy.

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.

Please, no phone calls or emails to any employee of Menlo Security outside of the Talent organization. Menlo Security’s policy is to only accept resumes from agencies via Ashby (ATS). Agencies must have a valid services agreement executed and must have been assigned by the Talent team to a specific requisition. In the event a candidate submitted outside of this policy is hired, no fee or payment will be paid.