Security Infrastructure Engineer

3 months, 1 week ago
Full-time
Senior
DevOps and Infrastructure
Tailscale

Tailscale

Tailscale is a zero config VPN service that simplifies network security and connectivity for teams of any scale, offering easy deployment, minimal latency, and compatibility with existing services.

Diversified Telecommunication Services
51-250
Founded 2019
$115M raised

Description

  • Design and build security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD systems.
  • Improve Tailscale’s security and privacy by identifying features, bug fixes, and defense-in-depth enhancements and implementing them across the codebase.
  • Audit Tailscale infrastructure for technical security weaknesses and drive mitigations to resolution.
  • Support engineering decisions with threat modeling, security analysis, and subject-matter expertise.
  • Act as a technical lead during security incidents, focusing on infrastructure-level containment and remediation.
  • Spend 25-50% of the role writing software rather than only performing operational or governance security work.

Requirements

  • Expertise in cloud platform security, especially AWS, multi-cloud networks, and cloud-agnostic system design.
  • Familiarity with container security, orchestration security, and authentication/authorization.
  • Familiarity with internet and web security fundamentals such as WAFs, TLS, PKI, and DNS security.
  • Proficiency in at least one programming language; Tailscale uses Go.
  • Experience with infrastructure as code tooling such as Terraform or Ansible.
  • Prior experience in a safety-related technical role such as infrastructure security, security operations, threat modeling, or digital forensics and incident response.
  • Knowledge of operating system internals and security mechanisms.
  • Knowledge of common networking protocols.
  • Ability to think on your feet and work comfortably asynchronously.
  • Ability to give and process constructive feedback, work independently and collaboratively, and adapt to a startup environment.
  • A risk-based approach to building security controls that balances security expertise with practical, usable solutions.

Benefits

  • Competitive total compensation package including base salary, equity, and variable commission for quota-based roles.
  • CAN pay range of $218,420 to $273,360 CAD.
  • Comprehensive group benefits with no waiting period, including health, vision, and dental coverage for employees and families.
  • Remote-first work environment with flexibility to work from wherever you have Wi-Fi, plus access to a corporate co-working program.
  • $1,500 USD annually for professional development, plus mentorship, coaching, and internal promotion opportunities.
  • Flexible paid time off and support for work-life integration.
  • Home office support including a company-owned laptop, monthly internet reimbursement, and $1,000 USD to customize your workstation.
  • Generous parental leave from day one with top-ups for up to 26 weeks.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Principal Identity Engineer

Hasbro 5K-10K Consumer Goods

Wizards of the Coast is hiring a Principal Identity Engineer to own the technical direction of its enterprise identity architecture, supporting Zero Trust, privileged access, and identity governance across cloud and on-premises environments.

Active Directory CI/CD Git OpenID Connect PowerShell Pulumi Python REST API SAML Terraform
16 hours, 11 minutes ago

Senior Device Engineer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Device Engineer to build automation software that identifies, fingerprints, and interacts with network-connected devices across critical infrastructure environments.

Cybersecurity Docker Embedded Systems Go HTTP JavaScript Node.js TCP/IP TLS TypeScript
16 hours, 11 minutes ago

Elastic Engineer

Jolera 251-1K Internet Software & Services

Jolera is seeking an Elastic Engineer to design and operate scalable Elasticsearch-based environments for cybersecurity analytics, threat hunting, and detection workflows.

Cybersecurity Elasticsearch Encryption Java Kibana Linux Logstash Machine Learning Python Ruby
16 hours, 41 minutes ago

Staff Software Development Engineer - Windows Endpoint

BeyondTrust 1K-5K Professional Services

BeyondTrust is hiring a Staff Software Development Engineer to own Windows kernel-mode enforcement for its Identity Security Platform, building real-time security controls that decide whether actions on Windows endpoints are permitted or denied.

Agile C C++ Rust
16 hours, 41 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers