Tailscale
Posted 7mo ago

Security Infrastructure Engineer

Tailscale
Canada or United States
$218k-$273k/yrRemoteFull Time
Responsibilities
  • Design controls
  • Audit infrastructure
  • Threat modeling
Requirements
  • Design and implement security controls across cloud
  • Container, OS, and networks
  • Perform threat modeling
  • Audit infrastructure
  • Contribute 25-50% of time to software development
Technical tools mentioned
GoTerraformAnsibleAWSKubernetesDockerWAFTLSPKIDNSIncident Response

Job description

About Tailscale 

Tailscale is building the new Internet by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.

Job Description

We’re seeking a talented software engineer, specializing in security and infrastructure, to help grow our product security team. We’re looking for people who can move Tailscale forward while making it safer to use. The abilities to think on your feet, collaborate with highly technical teams, and be comfortable working asynchronously are essential.

Key Responsibilities

  • Design and build security controls across diverse layers (e.g., cloud platforms, OS, Kubernetes, networks, CI/CD) to defend against sophisticated adversaries and insider threats.
  • Improve the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, defense-in-depth, and implementing them across our codebase.
  • Audit Tailscale infrastructure for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolution.
  • Support engineering decisions with threat modeling and security analysis and expertise.
  • You will spend 25-50% of your time in this role writing software vs purely operational or governance security responsibilities.

What We Are Looking For

Technical

  • Expertise in the security of cloud platforms (e.g., AWS), especially securing multi-cloud networks and infrastructure, and designing cloud agnostic systems
  • Familiarity with container security, orchestration security, and authentication/authorization
  • Familiarity with internet/web security fundamentals: WAF’s, TLS, PKI, DNS security, etc.
  • Proficiency developing in at least one programming language (Tailscale uses Go) and Infrastructure as Code tooling (e.g. Terraform, Ansible)
  • Prior experience in a safety-related technical role, e.g.:
    • infrastructure security
    • security operations
    • threat modeling and prioritization
    • digital forensics and incident response
  • Knowledge of operating system internals and security mechanisms
  • Knowledge of common networking protocols
  • Act as a Subject Matter Expert during security incidents, focusing on infrastructure-level containment and remediation

Team Fit

  • Ability to give and process constructive feedback
  • Ability to work independently and collaboratively
  • Flexibility to adjust to the dynamic nature of a startup
  • Take a risk-based approach to building security controls, balancing your security expertise and broad technical skillsets with practical, usable solutions

As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set.

CAN Pay Ranges
$218,420$273,360 CAD

Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications. We encourage you to help us break that statistic!

What We Offer

  • An inclusive, flexible environment where you can be your authentic self. We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.
  • A competitive total compensation package. This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).
  • Comprehensive group benefits with no waiting period. Take advantage of coverage for health, vision, dental, and more for you and your family!
  • Remote first company—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.
  • Connect with other Tailscalars IRL. Attend our annual company retreat, participate in team/department off-sites, or use your individual travel budget to meet up with team members in Canada, the US, or the UK. 
  • Support for your personal and professional development. Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities. 
  • Paid time off and a healthy work-life integration. Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world! 
  • A build-your-own home office setup. You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $1000 USD to customize your workstation to make it your own. 
  • Generous parental leave program from your first day. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups for up to 26 weeks. 

Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit https://tailscale.com/scam-awareness.

About Tailscale

Provides secure zero-trust networking and mesh VPN software.

Year founded
2019
Employees
291
Organization type
Private
Latest investment
Raised $160.00M Series C (2025) — led by Accel
Headquarters
CA

Similar jobs

Security Infrastructure Engineer roles
2d
Save
Mark Applied
Hide
Infrastructure Security Engineer
United States
$150k-$170k/yr RemoteFull Time
Cast & Crew
Cast & Crew: Provides payroll, accounting, and technology solutions for entertainment production.
3+ YOERequires 3–5 years in infrastructure, network, or cloud security; vulnerability management; security testing; Python and shell scripting; cloud security; network protocols; and security frameworks. Strong communication required.
Burp Suite, Postman, Python, Shell, AWS, Azure, GCP, Terraform, CloudFormation, Kubernetes, ECS, HackerOne, Bugcrowd, Intigriti, NIST CSF, CIS Benchmarks, ISO 27001, SIEM, SOAR, ZTNA, TCP/IP, DNS, TLS, VPN, IDS/IPS, DDoS
2d
Save
Mark Applied
Hide
Infrastructure Security Engineer
United States
$150k-$170k/yr RemoteFull Time
Cast & Crew
Cast & Crew: Payroll and production software for the entertainment industry.
3+ YOERequires 3–5 years in infrastructure, network, or cloud security; vulnerability management; finding triage; Burp Suite, Postman, Python, shell scripting; cloud security; network protocols; and security frameworks.
Burp Suite, Postman, Python, shell scripting, AWS, Azure, GCP, NIST CSF, CIS Benchmarks, ISO 27001, HackerOne, Bugcrowd, Intigriti, Terraform, CloudFormation, Kubernetes, ECS, SIEM, SOAR, ZTNA
2d
Save
Mark Applied
Hide
Sr Infrastructure & Security Engineer
Waukee, Iowa, United States
OnsiteFull Time
VizyPay
VizyPay: Provides transparent payment processing and merchant services for small businesses.
7+ YOEBachelor's degree or equivalent and 7+ years across infrastructure, cloud, network, security, or SRE, including 4+ years operating production infrastructure and security controls at scale. Requires cloud, automation, networking, security, and incident-response expertise.
Microsoft Azure, AWS, DigitalOcean, Terraform, GitOps, GitHub Actions, Azure DevOps, Python, PowerShell, Bash, Git, Docker, Kubernetes, AKS, EKS, DigitalOcean Kubernetes, AWS Lambda, Cloudflare Workers, Windows Server, Linux, Active Directory, Microsoft Entra, Microsoft 365, SD-WAN, VPN, Cloudflare, Prometheus, Grafana, CloudWatch, Azure Monitor, SIEM, EDR, FIM, PostgreSQL, SQL Server, MySQL, MITRE ATT&CK, OWASP LLM Top 10
3d
Save
Mark Applied
Hide
Infrastructure & Security Engineer
New York City, New York, United States
$180k-$250k/yr OnsiteFull Time
Axle
Axle: AI-native infrastructure for automating insurance data and workflows.
6+ YOERequires 6+ years in cloud, infrastructure, or security engineering; expertise in application and cloud security, production systems, CI/CD, monitoring, observability, security tooling, and incident response.
AWS, GCP, CI/CD, SOC 2
1w
Save
Mark Applied
Hide
Principal Infrastructure Security Engineer
Austin, Texas, United States
OnsiteFull Time
Brivo
Brivo: Cloud-native platform for physical security and video surveillance management.
8+ YOE8+ years designing, scaling, and maintaining secure SaaS infrastructure in high-availability cloud-native environments, ideally AWS, with expertise in SDLC security, threat modeling, proxies, mTLS, rate limiting, and zero-trust models.
AWS, Envoy, Nginx, SDLC, mTLS
1w
Save
Mark Applied
Hide
Lead, Infrastructure Security Engineer
Newark, New Jersey, United States
$134k-$220k/yr OnsiteFull Time
Prudential Financial
Prudential FinancialNYSE: PRU: Provides insurance, investment management, and retirement services globally.
Bachelor's in computer science or engineering or related experience; advanced security expertise, cloud and database security experience, programming, infrastructure automation, agile development, and mentoring skills.
AWS, Azure, Windows, Linux, Unix, Python, Shell, PowerShell, SQL, Ansible, CloudFormation, Terraform, IBM Guardium, Imperva DAM, MSSQL, Oracle, DB2, PostgreSQL, Redshift, Couchbase, MongoDB, Hadoop, Aurora PostgreSQL, Amazon DynamoDB, DocumentDB, RDS, Azure SQL, Cosmos DB, Snowflake, Docker, Kubernetes, TCP/IP, SNOW, Splunk
1w
Save
Mark Applied
Hide
Infrastructure Security Engineer
Quantico, Virginia, United States
$95k-$110k/yr OnsiteFull Time
Marine Corps Community Services
Marine Corps Community Services: Provides quality of life programs and services for Marines.
3+ YOEBachelor's degree or equivalent education and experience, plus 3+ years securing enterprise environments. Requires network and systems security expertise, Windows/Linux hardening, NIST/CIS/ISO 27001, vulnerability assessment, log analysis, and incident response.
next generation firewalls, VPN, Endpoint Detection and Response (EDR), anti-virus, tokenization, key management, web gateways, proxy services, web application firewalls, Network Time Protocol (NTP), RADIUS, Windows, Linux, NIST, CIS, ISO 27001, IP addressing, DNS, DHCP, VLANs, WAN, LAN, WLAN, Security+, CySA+, CCNA, CEH, CISSP, Security X (CASP)
1w
Save
Mark Applied
Hide
Infrastructure Security Engineer
Quantico, Virginia, United States
$95k-$110k/yr OnsiteFull Time
U.S. Department of the Navy
U.S. Department of the Navy: Provides national security through naval and maritime defense operations.
3+ YOEBachelor's degree in information technology or related field and 3+ years securing enterprise environments, or equivalent education and experience. Requires network and systems security expertise, Windows/Linux hardening, frameworks, vulnerability assessment, log analysis, and incident response.
Windows, Linux, NIST, CIS, ISO 27001, Security+, CySA+, CCNA, CEH, CISSP, Security X (CASP), Network Time Protocol (NTP), RADIUS, DNS, DHCP, VLANs, WAN, LAN, WLAN