Security Infrastructure Engineer

Remote Jobs; Remote; GBP 55,000 - 85,000; Full time

Job summary

A forwarding security software company is looking for a talented software engineer to join their product security team. This role requires experience in infrastructure security and cloud platform security, specifically with AWS. Candidates should be proficient in programming (preferably Go) and have knowledge of security fundamentals. The position emphasizes designing controls and auditing for technical weaknesses, contributing to a secure and user-friendly product environment.

Benefits

Async communication

Flexible work hours

Remote-friendly environment

Qualifications

• Expertise in security of multi-cloud networks and infrastructure required.
• Familiarity with threat modeling and incident response appreciated.
• Experience in safety-related technical role is necessary.

Responsibilities

• Design and build security controls across diverse layers.
• Improve security properties and implement features across the codebase.
• Audit infrastructure for technical security weaknesses.

Skills

Expertise in cloud platform security (AWS)

Container security knowledge

Familiarity with web security fundamentals

Proficiency in Go programming

Knowledge of common networking protocols

Tools

Terraform

Ansible

Job description

About Tailscale

Tailscale is building the new Internet by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.

Job Description

We're seeking a talented software engineer, specializing in security and infrastructure, to help grow our product security team. We're looking for people who can move Tailscale forward while making it safer to use. The abilities to think on your feet, collaborate with highly technical teams, and be comfortable working asynchronously are essential.

Key Responsibilities

• Design and build security controls across diverse layers (e.g., cloud platforms, OS, Kubernetes, networks, CI/CD) to defend against sophisticated adversaries and insider threats.
• Improve the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, defense-in-depth, and implementing them across our codebase.
• Audit Tailscale infrastructure for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolution.
• Support engineering decisions with threat modeling and security analysis and expertise.
• You will spend 25-50% of your time in this role writing software vs purely operational or governance security responsibilities.

What We Are Looking For

Technical

• Expertise in the security of cloud platforms (e.g., AWS), especially securing multi-cloud networks and infrastructure, and designing cloud agnostic systems
• Familiarity with container security, orchestration security, and authentication/authorization
• Familiarity with internet/web security fundamentals: WAF's, TLS, PKI, DNS security, etc.
• Proficiency developing in at least one programming language (Tailscale uses Go) and Infrastructure as Code tooling (e.g. Terraform, Ansible)
• Prior experience in a safety-related technical role, e.g.:
  • infrastructure security
  • security operations
  • threat modeling and prioritization
  • digital forensics and incident response
• Knowledge of operating system internals and security mechanisms
• Knowledge of common networking protocols
• Act as a Subject Matter Expert during security incidents, focusing on infrastructure-level containment and remediation

Team Fit

• Ability to give and process constructive feedback
• Ability to work independently and collaboratively
• Flexibility to adjust to the dynamic nature of a startup
• Take a risk-based approach to building security controls, balancing

Benefits

• Async