Security Software Engineer

This is a fully remote position, open to applicants in Canada, +1 more country.

📋 Description

• Enhance Tailscale’s security features by pinpointing areas for security and privacy enhancements, bug resolutions, and implementing defense-in-depth strategies throughout the codebase.

• Conduct audits of Tailscale features to uncover technical security vulnerabilities, propose mitigations or solutions, and guide them towards resolution.

• Assist engineering decisions with threat modeling, security evaluations, and expert insights.

• Dedicate at least 50% of the role to software development rather than solely focusing on operational or governance security tasks.

• Work in collaboration with engineering teams to advocate for secure coding methodologies and deliver focused security training and guidance.

⛳️ Requirements

• Strong proficiency in at least one programming language; Tailscale utilizes Go.

• Proven experience in developing for at least one application platform, including iOS, Android, web, Windows, macOS, or Linux.

• Previous experience in a safety-related technical position, such as application security, application platform security, penetration testing, threat modeling and prioritization, user experience design or research, or digital forensics and incident response.

• In-depth knowledge of web application vulnerabilities, encompassing the OWASP Top 10, client-side security, and prevalent API security weaknesses.

• Familiarity with cryptographic primitives and protocols.

• Understanding of common networking protocols.

• Capability to provide and receive constructive feedback.

• Ability to work both independently and as part of a team.

• Adaptability to the evolving nature of a startup environment.

• Proficiency in taking a risk-based approach to building security controls while balancing security expertise with practical and usable solutions.

🏝️ Benefits

• An inclusive and flexible environment where you can express your authentic self.

• Competitive total compensation package featuring a base salary, an equity incentive plan, and variable commission for quota-based roles.

• Comprehensive group benefits without a waiting period, including health, vision, dental, and additional options for you and your family.

• Remote-first work culture.

• Opportunities for virtual and in-person social events.

• Corporate co-working program.

• Employer-funded retirement contributions that match employee contributions dollar-for-dollar, with a maximum annual employer contribution equal to 0.75% of eligible compensation.

• Annual company retreat and team off-site events.

• $1500 USD annually allocated for professional development.

• Mentorship, coaching, and opportunities for internal promotions.

• Flexible paid time off policy.

• Choice of a company-owned laptop, either Mac or PC.

• Monthly reimbursement for home internet expenses.

• $500 USD allowance for home office or workstation customization.

• Paid parental leave top-ups: 20 weeks for birthing parents and 16 weeks for non-birthing parents.