Security Infrastructure Engineer

About the role

Tailscale is on the lookout for a talented software engineer with a focus on security and infrastructure to join our dedicated product security team. In this position, you will play a crucial role in enhancing the security and usability of our offerings while working closely with highly skilled teams in a remote, asynchronous setting.

Key facts

What you'll do

• Develop and execute security protocols across multiple layers of our systems, including cloud platforms, operating systems, container orchestration, networks, and development pipelines to safeguard against sophisticated threats.
• Analyze and enhance Tailscale's security and privacy features, identifying vulnerabilities and reinforcing defense mechanisms throughout the codebase.
• Perform comprehensive audits of Tailscale's infrastructure to detect security flaws, recommend solutions, and oversee their implementation.
• Offer expertise in security analysis and threat modeling to inform engineering decisions.
• Allocate 25-50% of your time to software development, alongside operational and governance security responsibilities.
• Collaborate with cross-functional teams to integrate security best practices into the development lifecycle.
• Stay updated on the latest security trends and threats, ensuring Tailscale's security posture remains .
• Participate in incident response activities, providing guidance and support during security incidents.
• Mentor junior team members and share knowledge on security practices and tools.
• Contribute to the creation of documentation and training materials related to security protocols and best practices.
• Engage in continuous improvement initiatives to enhance the overall security framework of Tailscale.
• Foster a culture of security awareness within the organization, promoting best practices among all employees.

Requirements

• Extensive knowledge of cloud platform security, especially in multi-cloud environments, and the capability to design systems that are cloud-agnostic.
• Proven experience in container security, orchestration security, and authentication/authorization frameworks.
• Strong grasp of essential internet and web security principles, including Web Application Firewalls, TLS, Public Key Infrastructure, and DNS security.
• Proficiency in at least one programming language, with Go being the primary language at Tailscale, along with experience using Infrastructure as Code tools such as Terraform or Ansible.
• Background in a safety-critical technical role, including infrastructure security, security operations, threat modeling, or incident response.
• Familiarity with operating system internals and their associated security features.
• Understanding of common networking protocols and their security implications.
• Ability to serve as a subject matter expert during security incidents, focusing on containment and remediation strategies at the infrastructure level.
• Strong communication skills for providing and receiving constructive feedback.
• Capability to work autonomously as well as collaboratively within a team environment.
• Willingness to adapt to the dynamic nature of a startup environment.
• A risk-based mindset when developing security controls, ensuring a balance between expertise and practical, user-friendly solutions.

Nice to have

• Experience with internet and web security fundamentals such as Web Application Firewalls, TLS, Public Key Infrastructure, and DNS security.
• Familiarity with security compliance frameworks and regulations.
• Knowledge of security monitoring and incident response tools.

Skills & tools

• Go
• Terraform
• Ansible
• AWS
• Kubernetes

Practical notes

• Salary range: $218,420 - $302,840 CAD
• A comprehensive benefits package that includes health, vision, and dental coverage with no waiting period.
• Employer-funded retirement contributions with up to a 0.75% match.
• An annual allowance of $1500 USD dedicated to professional development.
• Support for home office setup, including a company-provided laptop and reimbursement for internet costs.
• Generous paid parental leave policy (20 weeks for birthing parents, 16 weeks for non-birthing parents).
• Tailscale employs AI-assisted tools during the hiring process; however, all final hiring decisions are made by human personnel.
• Official communications regarding the hiring process will be sent from email addresses ending in @tailscale.com, @greenhouse.io, or @interviews.modernloop.io.

About the company

Tailscale is building the new Internet by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more.