SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: CAD 218,420 - 273,360 / annual
Tailscale is seeking a Security Infrastructure Engineer to join its product security team. The role focuses on designing and building security controls across diverse layers including cloud platforms, operating systems, Kubernetes, networks, and CI/CD pipelines to defend against sophisticated adversaries and insider threats.
Key responsibilities include improving Tailscale's security properties by identifying and implementing security and privacy features, conducting infrastructure audits to identify technical weaknesses, and supporting engineering decisions through threat modeling and security analysis. The role balances hands-on software development (25-50% of time) with operational and governance security responsibilities.
The ideal candidate brings expertise in cloud platform security (particularly AWS), multi-cloud networking, and infrastructure security. Required technical skills include container and orchestration security, authentication/authorization systems, web security fundamentals (WAFs, TLS, PKI, DNS), and proficiency in at least one programming language (Go preferred) plus Infrastructure as Code tools like Terraform or Ansible. Prior experience in infrastructure security, security operations, threat modeling, digital forensics, or incident response is essential.
Additional qualifications include knowledge of operating system internals, networking protocols, and the ability to act as a subject matter expert during security incidents. The role requires strong collaboration skills, ability to work independently in an asynchronous environment, and a risk-based approach to building practical security solutions. Tailscale is a fully distributed company founded in 2019, backed by top-tier investors, building a secure networking platform on WireGuard technology.
About Tailscale
AI / Data / Infrastructure; SaaS / Enterprise Software — secure networking platform built on WireGuard.
