Improve the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, and defense-in-depth, and implementing them across our codebase.
Audit Tailscale features for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolution.
Support engineering decisions with threat modeling and security analysis and expertise.
You will spend at least 50% of your time in this role writing software vs purely operational or governance security responsibilities.

Requirements

Proficiency developing in at least one programming language (Tailscale uses Go)
Proficiency developing for at least one application platform (e.g. iOS, Android, web, Windows, macOS, Linux)
Prior experience in a safety-related technical role, e.g.: application security or application platform security, penetration testing, threat modeling and prioritization, user experience design or research, digital forensics and incident response
Deep understanding of web application vulnerabilities (e.g., OWASP Top 10), client-side security, and common API security flaws
Collaborate with engineering teams to promote secure coding practices and provide targeted security guidance and training
Knowledge of cryptographic primitives and protocols
Knowledge of common networking protocols.

Benefits

An inclusive, flexible environment where you can be your authentic self.
A competitive total compensation package.
Comprehensive group benefits with no waiting period.
Remote first company—most of our teams work fully remotely.
Connect with other Tailscalars IRL.
Support for your personal and professional development.
Paid time off and a healthy work-life integration.
A build-your-own home office setup.
Generous parental leave program from your first day.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills

Goapplication securitypenetration testingthreat modelinguser experience designdigital forensicsincident responseweb application vulnerabilitiescryptographic primitivesnetworking protocols

Soft skills

collaborationcommunicationproblem-solvingsecurity analysisguidancetraining