Product Security Engineer — Remote & Impactful

NEPSE Trading; United States; Remote; USD 163,000 - 226,000; Full time

Benefits offered by this job

Equity incentives

Remote first environment

Health, vision & dental benefits

Retirement matching up to 0.75% ofcomp

Job summary

Tailscale is hiring a Security Software Engineer in the United States with remote collaboration. You will enhance product security by adding features, fixing vulnerabilities, and applying defense-in-depth across the codebase.

The role emphasizes threat modeling, security analysis, and practical security guidance within a startup-minded team. Applicants should be proficient in Go or another language, familiar with OWASP Top 10, and comfortable working across web, mobile, and desktop platforms.

Qualifications

• Experience as a security software engineer with a focus on application security.
• Strong threat modeling and security analysis capabilities.
• Deep understanding of web application vulnerabilities (OWASP Top 10) and API security.
• Proficiency in Go or another programming language; comfortable across platforms (web, iOS, Android, Windows, macOS, Linux).
• Ability to collaborate with engineering teams and communicate security guidance effectively.

Responsibilities

• Improve the security properties of Tailscale by implementing features and fixes across the codebase.
• Audit features for security weaknesses and drive mitigations to resolution.
• Support engineering decisions with threat modeling and security analysis expertise.

Skills

Go

Threat modeling

Security analysis

Secure coding practices

web applications

Tools

OWASP Top 10

Job description

Tailscale is hiring a Security Software Engineer in the United States with remote collaboration. You will enhance product security by adding features, fixing vulnerabilities, and applying defense-in-depth across the codebase.

The role emphasizes threat modeling, security analysis, and practical security guidance within a startup-minded team. Applicants should be proficient in Go or another language, familiar with OWASP Top 10, and comfortable working across web, mobile, and desktop platforms.