Security Software Engineer

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Recognize opportunities for enhancements in security and privacy features, bug resolutions, and improvements to defense-in-depth throughout Tailscale’s codebase.

• Execute security and privacy enhancements within the codebase.

• Evaluate Tailscale features for potential technical security vulnerabilities.

• Determine mitigations or solutions and drive the resolution of identified weaknesses.

• Assist engineering decisions with threat modeling, security analysis, and specialized knowledge.

• Allocate a minimum of 50% of your time to software development rather than purely operational or governance security tasks.

• Work alongside engineering teams to advocate for secure coding methodologies and provide focused security guidance and training.

⛳️ Requirements

• Expertise in at least one programming language; Tailscale primarily utilizes Go.

• Experience in developing for at least one application platform, including iOS, Android, web, Windows, macOS, or Linux.

• Previous experience in a safety-related technical position, such as application security, application platform security, penetration testing, threat modeling and prioritization, user experience design or research, or digital forensics and incident response.

• Extensive knowledge of web application vulnerabilities, including the OWASP Top 10.

• Familiarity with client-side security and prevalent API security flaws.

• Understanding of cryptographic primitives and protocols.

• Awareness of common networking protocols.

• Capability to provide and receive constructive feedback.

• Competence in working both independently and collaboratively.

• Adaptability to the dynamic environment of a startup.

• Risk-based perspective on establishing security controls while balancing security expertise with practical, usable solutions.

🏝️ Benefits

• Equity incentive plan.

• Comprehensive health, vision, and dental benefits with no waiting period.

• Flexible remote-first working environment.

• Virtual and in-person social events.

• Corporate co-working program.

• Employer-funded retirement contributions matching employee contributions dollar-for-dollar, up to 0.75% of eligible compensation annually.

• Annual company retreat and team off-site events.

• $1,500 USD annual professional development budget.

• Opportunities for mentorship, coaching, and internal promotions.

• Flexible paid time off program.

• Company-owned laptop (Mac or PC).

• Monthly reimbursement for home internet expenses.

• $500 USD allowance for home office workstation customization.

• Paid parental leave top-ups: 20 weeks for birthing parents and 16 weeks for non-birthing parents.