Security Software Engineer

Tailscale

. Improve Tailscale’s security properties by identifying opportunities for security and privacy features, bug fixes, and defense-in-depth, and implementing them across the codebase .

Posted 11/5/2026full-timeRemote • Canada, United StatesMid-LevelSenior💰 CA$218,420 - CA$302,840 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates proficiency in Go programming and application security, with a strong focus on identifying and mitigating web application vulnerabilities. Capable of collaborating with engineering teams to promote secure coding practices while balancing security controls with practical solutions.

Highest-signal resume keywords

Go ProgrammingApplication SecurityThreat ModelingWeb Application VulnerabilitiesCryptographic Protocols

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Go ProgrammingApplication SecurityThreat ModelingWeb Application VulnerabilitiesCryptographic PrimitivesNetworking ProtocolsPenetration TestingDigital ForensicsIncident ResponseUser Experience Design

Soft Skills

Constructive FeedbackIndependent WorkCollaborative WorkFlexibility

Industry Keywords

OWASP Top 10Security AnalysisSecure Coding PracticesRisk-Based ApproachDefense-In-Depth

Tech Stack

Tools & technologies

AndroidiOSLinuxMacOSGo

About the role

Key responsibilities & impact

Improve Tailscale’s security properties by identifying opportunities for security and privacy features, bug fixes, and defense-in-depth, and implementing them across the codebase
Audit Tailscale features for technical security weaknesses, identify mitigations or solutions, and drive them toward resolution
Support engineering decisions with threat modeling, security analysis, and expertise
Spend at least 50% of the role writing software rather than focusing purely on operational or governance security responsibilities
Collaborate with engineering teams to promote secure coding practices and provide targeted security guidance and training

Requirements

What you’ll need

Proficiency developing in at least one programming language; Tailscale uses Go
Proficiency developing for at least one application platform, such as iOS, Android, web, Windows, macOS, or Linux
Prior experience in a safety-related technical role, such as application security, application platform security, penetration testing, threat modeling and prioritization, user experience design or research, or digital forensics and incident response
Deep understanding of web application vulnerabilities, including OWASP Top 10, client-side security, and common API security flaws
Knowledge of cryptographic primitives and protocols
Knowledge of common networking protocols
Ability to give and process constructive feedback
Ability to work independently and collaboratively
Flexibility to adjust to the dynamic nature of a startup
Ability to take a risk-based approach to building security controls and balance security expertise with practical, usable solutions

Benefits

Comp & perks

An inclusive, flexible environment where you can be your authentic self
Competitive total compensation package including a base salary, an equity incentive plan and variable commission for quota-based roles
Comprehensive group benefits with no waiting period, including health, vision, dental, and more for you and your family
Remote-first work environment
Virtual and in-person social events
Corporate co-working program
Employer-funded retirement contributions matching employee contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of eligible compensation
Annual company retreat and team off-sites
$1500 USD annually for professional development
Mentorship, coaching, and internal promotion opportunities
Flexible paid time off
Company-owned laptop choice of Mac or PC
Monthly home internet reimbursement
$500 USD home office/workstation customization allowance
Paid parental leave top-ups: 20 weeks for birthing parents and 16 weeks for non-birthing parents