Security Software Engineer

Tailscale; United States; Remote; USD 163,000 - 226,000; Full time

Benefits offered by this job

Remote first environment

Equity incentive plan

401(k) / retirement contributions

Professional development $1500/year

Paid time off

Home office stipend $500

Parental leave

Job summary

Tailscale is seeking a security- and privacy-focused software engineer to grow our product security team. You will help advance safe usage by identifying security opportunities and implementing them across the codebase, while collaborating with highly technical teams asynchronously.

The role emphasizes threat modeling, security analysis, and hands-on code work in Go across multiple platforms. A strong security background and collaborative mindset are essential.

Qualifications

• Proficiency in Go and cross-platform development.
• Experience with threat modeling and security analysis.
• Strong knowledge of web app vulnerabilities (OWASP Top 10) and API security.
• Ability to train/guide engineers on secure coding practices.

Responsibilities

• Improve security properties across the codebase with features, fixes, and defense-in-depth.
• Audit features for security weaknesses and drive mitigations to resolution.
• Support decision-making with threat modeling and security analysis.
• Spend at least 50% of time writing software, not just governance security.

Skills

Go programming

Cross-platform

Threat modeling

OWASP Top 10

Cryptography

Secure coding guidance

Networking protocols

Incident response

Job description

About Tailscale

Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.

About the Role

We’re seeking a talented software engineer, specializing in security and privacy, to help grow our product security team. We’re looking for people who can move Tailscale forward while making it safer to use. The abilities to think on your feet, collaborate with highly technical teams, and be comfortable working asynchronously are essential.

Key Responsibilities

• Improve the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, and defense-in-depth, and implementing them across our codebase.
• Audit Tailscale features for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolution.
• Support engineering decisions with threat modeling and security analysis and expertise.
• You will spend at least 50% of your time in this role writing software vs purely operational or governance security responsibilities.

What We Are Looking For

Technical

• Proficiency developing in at least one programming language (Tailscale uses Go)
• Proficiency developing for at least one application platform (e.g. iOS, Android, web, Windows, macOS, Linux)
• Prior experience in a safety-related technical role, e.g.:
• application security or application platform security
• penetration testing
• threat modeling and prioritization
• digital forensics and incident response
• Deep understanding of web application vulnerabilities (e.g., OWASP Top 10), client-side security, and common API security flaws
• Collaborate with engineering teams to promote secure coding practices and provide targeted security guidance and training
• Knowledge of cryptographic primitives and protocols
• Knowledge of common networking protocols

Team Fit

• Ability to give and process constructive feedback
• Ability to work independently and collaboratively
• Flexibility to adjust to the dynamic nature of a startup
• Take a risk-based approach to building security controls, balancing your security expertise and broad technical skillsets with practical, usable solutions

As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set.

US Pay Range

$163,000 - $226,000 USD

What We Offer

• An inclusive, flexible environment where you can be your authentic self. We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.
• A competitive total compensation package. This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).
• Comprehensive group benefits with no waiting period. Take advantage of coverage for health, vision, dental, and more for you and your family!
• Remote first company—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.
• Employer-funded retirement contributions. Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.
• Connect with other Tailscalars IRL. Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration.
• Support for your personal and professional development. Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.
• Paid time off and a healthy work-life integration. Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!
• A build-your-own home office setup. You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own.
• Paid parental leave program. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents).

Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter.

Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people.

Are you located in or willing to relocate to the United States? * Select...

Please note, you must reside in the United States to be considered for this position. We are not currently able to provide relocation support for this role. If you intended to apply for employment in another country where we are hiring, please return to our careers page and apply to the correct country’s job post for this role.

Will you now or at any point in the future require visa sponsorship to work in the United States? * Select...

Please note, you must legally be able to work in the United States to be considered for this position. We are not currently able to provide immigration support for this role. If you intended to apply for employment in another country where we are hiring, please return to our careers page and apply to the correct country’s job post for this role.

Why are you interested in joining Tailscale? Thoughtful responses are encouraged. *

We're always curious - have you used Tailscale before? * Select...

I have read and understand Tailscale's "Candidate Privacy Policy" and "AI Guidelines" regarding the collection and use of my personal information and use of AI tools in the hiring and interviewing process. These can also be reviewed on the Tailscale career site. * Select...

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Tailscale’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.