Security Software Engineer

Tailscale Tailscale · Enterprise · Remote · Engineering

Software engineer specializing in security and privacy to improve the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, and defense-in-depth, and implementing them across the codebase. Auditing features for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolution. Supporting engineering decisions with threat modeling and security analysis and expertise. Spending at least 50% of time writing software.

What you'd actually do

  1. Improve the security properties of Tailscale by identifying opportunities for security and privacy features, bug fixes, and defense-in-depth, and implementing them across our codebase.
  2. Audit Tailscale features for technical security weaknesses, identifying mitigations or solutions, and driving them towards resolution.
  3. Support engineering decisions with threat modeling and security analysis and expertise.
  4. You will spend at least 50% of your time in this role writing software vs purely operational or governance security responsibilities.

Skills

Required

  • Proficiency developing in at least one programming language (Tailscale uses Go)
  • Proficiency developing for at least one application platform (e.g. iOS, Android, web, Windows, macOS, Linux)
  • Deep understanding of web application vulnerabilities (e.g., OWASP Top 10), client-side security, and common API security flaws
  • Knowledge of cryptographic primitives and protocols
  • Knowledge of common networking protocols

Nice to have

  • Prior experience in a safety-related technical role
  • Collaborate with engineering teams to promote secure coding practices and provide targeted security guidance and training
  • Take a risk-based approach to building security controls, balancing your security expertise and broad technical skillsets with practical, usable solutions

What the JD emphasized

  • security properties
  • security features
  • privacy features
  • technical security weaknesses
  • threat modeling
  • security analysis
  • secure coding practices