Security Infrastructure Engineer

Responsibilities

• Design and build security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD environments.
• Identify and implement security and privacy features, bug fixes, and defense-in-depth improvements across the codebase.
• Audit Tailscale infrastructure for technical security weaknesses and drive mitigations through resolution.
• Support engineering decisions through threat modeling, security analysis, and security expertise.
• Write software for approximately 25–50% of the role.
• Act as a subject matter expert during security incidents, focusing on infrastructure-level containment and remediation.

Requirements

• Expertise securing cloud platforms such as AWS, including multi-cloud networks and infrastructure and cloud-agnostic system design.
• Familiarity with container security, orchestration security, authentication, and authorization.
• Familiarity with web and Internet security fundamentals including WAFs, TLS, PKI, and DNS security.
• Proficiency in at least one programming language, with Go used at Tailscale, and in infrastructure-as-code tooling such as Terraform or Ansible.
• Prior experience in infrastructure security, security operations, threat modeling and prioritization, or digital forensics and incident response.
• Knowledge of operating-system internals, security mechanisms, and common networking protocols.
• Ability to collaborate with highly technical teams, work independently and asynchronously, and provide and process constructive feedback.
• Ability to take a risk-based approach to building practical and usable security controls.

Benefits

• Remote-first, flexible work environment with distributed collaboration, virtual and in-person social events, and a corporate coworking program.
• Base salary, equity incentive plan, and variable commission for quota-based roles.
• Comprehensive health, vision, dental, and other group benefits with no waiting period.
• Employer-funded retirement contributions matching employee contributions dollar-for-dollar up to 0.75% of eligible compensation annually.
• Annual company retreat, team off-sites, and support for intentional in-person connection and team travel.
• $1,500 USD annually for professional development, plus mentorship, coaching, and internal promotion opportunities.
• Flexible paid time off program.
• Company-owned Mac or PC laptop, monthly home internet reimbursement, and $500 USD for workstation customization.
• Paid parental leave of 20 weeks for birthing parents and 16 weeks for non-birthing parents.