Role overview

Security Infrastructure Engineer

Requirements and responsibilities

Readable role content extracted into sections for faster review.

Key Responsibilities

  • Design and build security controls across diverse layers (e.g., cloud platforms, OS, Kubernetes, networks, CI/CD) to defend against sophisticated adversaries and insider threats.
  • Improve the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, defense-in-depth, and implementing them across our codebase.
  • Audit Tailscale infrastructure for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolution.
  • Support engineering decisions with threat modeling and security analysis and expertise.
  • You will spend 25-50% of your time in this role writing software vs purely operational or governance security responsibilities.

Technical

  • Expertise in the security of cloud platforms (e.g., AWS), especially securing multi-cloud networks and infrastructure, and designing cloud agnostic systems
  • Familiarity with container security, orchestration security, and authentication/authorization
  • Familiarity with internet/web security fundamentals: WAF’s, TLS, PKI, DNS security, etc.
  • Proficiency developing in at least one programming language (Tailscale uses Go) and Infrastructure as Code tooling (e.g. Terraform, Ansible)
  • Prior experience in a safety-related technical role, e.g.:
  • infrastructure security
  • security operations
  • threat modeling and prioritization
  • digital forensics and incident response
  • Knowledge of operating system internals and security mechanisms
  • Knowledge of common networking protocols
  • Act as a Subject Matter Expert during security incidents, focusing on infrastructure-level containment and remediation

Details

  • infrastructure security
  • security operations
  • threat modeling and prioritization
  • digital forensics and incident response

Team Fit

  • Ability to give and process constructive feedback
  • Ability to work independently and collaboratively
  • Flexibility to adjust to the dynamic nature of a startup
  • Take a risk-based approach to building security controls, balancing your security expertise and broad technical skillsets with practical, usable solutions

What We Offer

  • An inclusive, flexible environment where you can be your authentic self. We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.
  • A competitive total compensation package. This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).
  • Comprehensive group benefits with no waiting period. Take advantage of coverage for health, vision, dental, and more for you and your family!
  • Remote first company—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.
  • Employer-funded retirement contributions. Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.
  • Connect with other Tailscalars IRL. Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration.
  • Support for your personal and professional development. Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.
  • Paid time off and a healthy work-life integration. Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!
  • A build-your-own home office setup. You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own.
  • Paid parental leave program. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents).
Similar roles

Keep a backup shortlist.

Browse stack
FocusSecurity EngineeringRole area
Seniority signalSenior, MiddleCandidate level
StackAWS, CI/CD, KubernetesPrimary skills
Location2 accepted countriesEligibility

Stack

Use these tags to compare similar remote roles.

Location eligibility

Candidates should apply only when their profile country is listed here.

Your profileCountry not setSign in to check your country against this role.

Hiring flow

WithMira shows the role, then sends candidates to the company application.

1Check role fit, stack, and location eligibility in WithMira.
2Open the company application page from the tracked apply link.
3Save the role or subscribe for similar opportunities before leaving.