[Remote] Security Infrastructure Engineer

Note: The job is a remote job and is open to candidates in USA. Tailscale is building the new Internet by delivering software that makes it easy to securely interconnect people and their devices. They are seeking a talented Security Infrastructure Engineer to grow their product security team, focusing on designing and implementing security controls and improving the overall security posture of Tailscale's infrastructure.ResponsibilitiesDesign and build security controls across diverse layers (e.g., cloud platforms, OS, Kubernetes, networks, CI/CD) to defend against sophisticated adversaries and insider threatsImprove the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, defense-in-depth, and implementing them across our codebaseAudit Tailscale infrastructure for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolutionSupport engineering decisions with threat modeling and security analysis and expertiseYou will spend 25-50% of your time in this role writing software vs purely operational or governance security responsibilitiesSkillsExpertise in the security of cloud platforms (e.g., AWS), especially securing multi-cloud networks and infrastructure, and designing cloud agnostic systemsFamiliarity with container security, orchestration security, and authentication/authorizationFamiliarity with internet/web security fundamentals: WAF's, TLS, PKI, DNS security, etcProficiency developing in at least one programming language (Tailscale uses Go) and Infrastructure as Code tooling (e.g. Terraform, Ansible)Prior experience in a safety-related technical role, e.g.: infrastructure security, security operations, threat modeling and prioritization, digital forensics and incident responseKnowledge of operating system internals and security mechanismsKnowledge of common networking protocolsAct as a Subject Matter Expert during security incidents, focusing on infrastructure-level containment and remediationAbility to give and process constructive feedbackAbility to work independently and collaborativelyFlexibility to adjust to the dynamic nature of a startupTake a risk-based approach to building security controls, balancing your security expertise and broad technical skillsets with practical, usable solutionsBenefitsAn inclusive, flexible environment where you can be your authentic self.A competitive total compensation package. This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).Comprehensive group benefits with no waiting period. Take advantage of coverage for health, vision, dental, and more for you and your family!Remote first company—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.Connect with other Tailscalars IRL. Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, and the United Kingdom. We support intentional in-person connection through team travel and distributed collaboration.Support for your personal and professional development. Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.Paid time off and a healthy work-life integration. Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!A build-your-own home office setup. You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $1000 USD to customize your workstation to make it your own.Generous parental leave program from your first day. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups for up to 26 weeks.Company OverviewTailscale is a software company that provides zero-configuration virtual private networks (VPNs) for secure connectivity. It was founded in 2019, and is headquartered in Toronto, Ontario, CAN, with a workforce of 201-500 employees. Its website is https://www.tailscale.com.Company H1B SponsorshipTailscale has a track record of offering H1B sponsorships, with 2 in 2023. Please note that this does not guarantee sponsorship for this specific role.