Security Software Engineer - Tailscale

About Tailscale

Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices. We're building a future for the Internet that's easy, sensible, and safe. Founded in 2019 and fully distributed, we are backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.

About the Role

We’re seeking a talented software engineer, specializing in security and privacy, to help grow our product security team. You will help move Tailscale forward while making it safer to use. The ability to think on your feet, collaborate with highly technical teams, and work asynchronously is essential.

Key Responsibilities

• Improve security properties by identifying opportunities for features, bug fixes, and defense-in-depth implementations.
• Audit Tailscale features for technical security weaknesses and drive mitigations to resolution.
• Support engineering decisions with threat modeling and security analysis.
• Spend at least 50% of your time writing software vs. operational or governance tasks.

What We Are Looking For

• Proficiency in at least one programming language (we use Go).
• Proficiency developing for at least one application platform (e.g., iOS, Android, web, Windows, macOS, Linux).
• Prior experience in a safety-related technical role (e.g., AppSec, penetration testing, threat modeling, or incident response).
• Deep understanding of web application vulnerabilities (OWASP Top 10), client-side security, and API security flaws.
• Knowledge of cryptographic primitives, protocols, and common networking protocols.
• Ability to promote secure coding practices and provide targeted guidance to engineering teams.

Team Fit

• Ability to give and process constructive feedback.
• Ability to work independently and collaboratively in a distributed environment.
• Flexibility to adjust to the dynamic nature of a startup.
• A risk-based approach to building security controls.

What We Offer

• Competitive total compensation (base salary + equity).
• Comprehensive group benefits with no waiting period.
• Remote-first culture with annual retreats and team off-sites.
• Employer-funded retirement contributions (0.75% match).
• $1,500 USD annual professional development budget.
• Build-your-own home office setup ($500 stipend + monthly internet reimbursement).
• Paid parental leave (20 weeks for birthing parents, 16 weeks for non-birthing).