Skip to content

Tailscale

Remote (United States)

Security Software Engineer

Posted 3 days ago

Level
Mid level
Experience
Not stated
Work style
Remote
Area
Security engineering

At a glance

The role in plain English

This Security Software Engineer role at Tailscale focuses on improving the security and privacy of their software products. The position suits experienced software engineers with a background in security, comfortable working remotely and asynchronously. Day-to-day work includes writing code, auditing features for vulnerabilities, supporting engineering decisions with security expertise, and collaborating with technical teams to enhance security practices.

What you'll do

  • Write and implement security and privacy features in the codebase
  • Audit features for technical security weaknesses and drive resolutions
  • Support engineering decisions with threat modelling and security analysis
  • Collaborate with engineering teams to promote secure coding practices

What they're looking for

Essential

  • Proficiency in at least one programming language
  • Experience with at least one application platform
  • Prior experience in a safety-related technical role
  • Deep understanding of web application vulnerabilities
  • Knowledge of cryptographic primitives and protocols

Nice to have

  • Knowledge of common networking protocols
  • Experience with user experience design or research
  • Experience in digital forensics and incident response

Core skills

  • Go
  • Threat modelling
  • Penetration testing
  • Application security
  • Cryptography
  • Web security
  • API security

The shape of the job

Technical depth

4/5

FoundationalSpecialist

Pace

3/5

SteadyFast-moving

Ownership

4/5

GuidedSelf-directed

Teamwork

3/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe a time you identified and resolved a security vulnerability in production code.
  2. 02How would you approach threat modelling for a new product feature?
  3. 03What are the most common API security flaws and how do you mitigate them?
  4. 04Explain your experience with cryptographic protocols in a software engineering context.

About Tailscale

Tailscale develops software to securely interconnect people and their devices, supporting users from individuals to large organisations.

Full job descriptionAs published by Tailscale

Thank you for considering Tailscale. If this job description resonates with you, please apply. Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications. We encourage you to help us break that statistic!

About Tailscale

Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.

About the Role

We’re seeking a talented software engineer, specializing in security and privacy, to help grow our product security team. We’re looking for people who can move Tailscale forward while making it safer to use. The abilities to think on your feet, collaborate with highly technical teams, and be comfortable working asynchronously are essential.

Key Responsibilities

  • Improve the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, and defense-in-depth, and implementing them across our codebase.
  • Audit Tailscale features for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolution.
  • Support engineering decisions with threat modeling and security analysis and expertise.
  • You will spend at least 50% of your time in this role writing software vs purely operational or governance security responsibilities.

What We Are Looking For

Technical

  • Proficiency developing in at least one programming language (Tailscale uses Go)
  • Proficiency developing for at least one application platform (e.g. iOS, Android, web, Windows, macOS, Linux)
  • Prior experience in a safety-related technical role, e.g.:
  • application security or application platform security
  • penetration testing
  • threat modeling and prioritization
  • user experience design or research
  • digital forensics and incident response
  • Deep understanding of web application vulnerabilities (e.g., OWASP Top 10), client-side security, and common API security flaws
  • Collaborate with engineering teams to promote secure coding practices and provide targeted security guidance and training
  • Knowledge of cryptographic primitives and protocols
  • Knowledge of common networking protocols

Team Fit

  • Ability to give and process constructive feedback
  • Ability to work independently and collaboratively
  • Flexibility to adjust to the dynamic nature of a startup
  • Take a risk-based approach to building security controls, balancing your security expertise and broad technical skillsets with practical, usable solutions

As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set.

US Pay Range

$163,000 — $226,000 USD

What We Offer

  • An inclusive, flexible environment where you can be your authentic self. We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.
  • A competitive total compensation package. This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).
  • Comprehensive group benefits with no waiting period. Take advantage of coverage for health, vision, dental, and more for you and your family!
  • Remote first company —most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.
  • Employer-funded retirement contributions. Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.
  • Connect with other Tailscalars IRL. Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration.
  • Support for your personal and professional development. Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.
  • Paid time off and a healthy work-life integration. Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!
  • A build-your-own home office setup. You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own.
  • Paid parental leave program . We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents).

Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter.

Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people.

Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit https://tailscale.com/scam-awareness .

  • Remote (USA) · $110k to $145k

    Build and secure CI/CD pipelines, embed automated security scanning, manage secrets, and support compliance for an enterprise data platform. Requires DevSecOps experience, cloud pipeline skills (ideally Azure), and infrastructure as code knowledge.

    Mid levelCI/CD pipelinesAzureSecrets management
  • San Francisco · Hybrid · $185k to $300k

    Collaborate with customer security teams to develop and implement AI-driven security solutions, supporting the defense of critical systems. The role is based in San Francisco and requires up to 50% travel.

    Mid levelSoftware engineeringSecurity engineeringAI agents
  • Arizona and 16 more · Remote

    Implement and support Proofpoint Data Security products including DLP, insider threat, and cloud security solutions for customers. Requires experience with DLP solutions and service delivery in cybersecurity.

    Mid levelData securityInsider threat managementEndpoint security
  • New York City; San Francisco · Hybrid · $185k to $300k

    Work with customer security teams to build and deploy security-focused AI tools and systems, helping defend critical infrastructure. Requires collaborating with engineers and security leaders, and up to 50% travel. Based in New York City.

    Mid levelSoftware engineeringSecurity engineeringAI agents

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

Free beginner roadmap PDF when you join · No spam · Unsubscribe anytime