Security Infrastructure Engineer

About the role

Tailscale is seeking a skilled software engineer focused on security and infrastructure to join our product security team. This role involves enhancing the safety and usability of our product while collaborating with highly technical teams in an asynchronous environment.

Key facts

What you'll do

• Design and implement security measures across various system layers, including cloud environments, operating systems, container orchestration, networks, and development pipelines, to protect against advanced threats.
• Identify and implement improvements to Tailscale's security and privacy features, addressing vulnerabilities and strengthening defense mechanisms throughout the codebase.
• Conduct thorough audits of Tailscale's infrastructure to uncover security weaknesses, propose solutions, and oversee their implementation.
• Provide security analysis and threat modeling expertise to support engineering decisions.
• Dedicate 25-50% of your time to software development, in addition to operational and governance security tasks.

Requirements

• Deep understanding of cloud platform security, particularly in multi-cloud network and infrastructure protection, and the ability to design cloud-agnostic systems.
• Experience with container security, orchestration security, and authentication/authorization systems.
• Familiarity with fundamental internet and web security concepts, such as Web Application Firewalls, TLS, Public Key Infrastructure, and DNS security.
• Proficiency in at least one programming language (Go is used at Tailscale) and experience with Infrastructure as Code tools like Terraform or Ansible.
• Previous experience in a safety-critical technical role, such as infrastructure security, security operations, threat modeling, or incident response.
• Knowledge of operating system internals and their security features.
• Understanding of common networking protocols.
• Ability to act as a subject matter expert during security incidents, focusing on containment and remediation at the infrastructure level.
• Capacity to provide and receive constructive feedback.
• Ability to work both independently and as part of a team.
• Adaptability to the fast-paced nature of a startup.
• A risk-based approach to security control development, balancing expertise with practical, usable solutions.

Nice to have

• Experience with internet/web security fundamentals like WAFs, TLS, PKI, and DNS security.

Skills & tools

• Go
• Terraform
• Ansible
• AWS
• Kubernetes

Practical notes

• Salary range: $218,420 - $302,840 CAD
• Comprehensive benefits package including health, vision, and dental with no waiting period.
• Employer-funded retirement contributions (up to 0.75% match).
• Annual allowance of $1500 USD for professional development.
• Home office setup support, including company-provided laptop and internet reimbursement.
• Paid parental leave (20 weeks for birthing parents, 16 weeks for non-birthing parents).
• Tailscale uses AI-assisted tools in its hiring process; all hiring decisions are made by humans.
• Official communications will come from @tailscale.com, @greenhouse.io, or @interviews.modernloop.io email addresses.