[Remote] Security Infrastructure Engineer

Note: The job is a remote job and is open to candidates in USA. Tailscale develops software that securely interconnects people and their devices. The Security Infrastructure Engineer will help grow the product security team by designing security controls, improving product security, auditing infrastructure, supporting threat modeling, and implementing security solutions in code.

Responsibilities

• Design and build security controls across diverse layers (e.g., cloud platforms, OS, Kubernetes, networks, CI/CD) to defend against sophisticated adversaries and insider threats
• Improve the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, defense-in-depth, and implementing them across our codebase
• Audit Tailscale infrastructure for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolution
• Support engineering decisions with threat modeling and security analysis and expertise
• You will spend 25-50% of your time in this role writing software vs purely operational or governance security responsibilities
• Act as a Subject Matter Expert during security incidents, focusing on infrastructure-level containment and remediation

Skills

• The abilities to think on your feet, collaborate with highly technical teams, and be comfortable working asynchronously are essential
• Expertise in the security of cloud platforms (e.g., AWS), especially securing multi-cloud networks and infrastructure, and designing cloud agnostic systems
• Familiarity with container security, orchestration security, and authentication/authorization
• Familiarity with internet/web security fundamentals: WAF's, TLS, PKI, DNS security, etc
• Proficiency developing in at least one programming language (Tailscale uses Go) and Infrastructure as Code tooling (e.g. Terraform, Ansible)
• Prior experience in a safety-related technical role, e.g.:
• Infrastructure security
• Security operations
• Threat modeling and prioritization
• Digital forensics and incident response
• Knowledge of operating system internals and security mechanisms
• Knowledge of common networking protocols
• Ability to give and process constructive feedback
• Ability to work independently and collaboratively
• Flexibility to adjust to the dynamic nature of a startup
• Take a risk-based approach to building security controls, balancing your security expertise and broad technical skillsets with practical, usable solutions

Benefits

• An inclusive, flexible environment where you can be your authentic self.
• An equity incentive plan and variable commission (for quota-based roles).
• Comprehensive group benefits with no waiting period, including health, vision, and dental coverage for you and your family.
• Remote first company—most of our teams work fully remotely.
• Virtual and in-person social events.
• Corporate co-working program to visit WeWork (or other similar spaces near you).
• Employer-funded retirement contributions: Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.
• Annual company retreat and team off-sites.
• $1500 USD annually for professional development.
• Mentorship, coaching, and internal promotion opportunities.
• Flexible, paid time off program.
• A company-owned laptop (Mac or PC).
• Monthly home internet reimbursement.
• $500 USD to customize your workstation.
• Paid parental leave program with parental leave top-ups of 20 weeks for birthing parents and 16 weeks for non-birthing parents.

Company Overview

Company H1B Sponsorship