Infrastructure Security Engineer

LiveKit is building the infrastructure layer for the voice-driven era of computing. Their platform enables developers to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for companies like OpenAI, xAI, Salesforce, Coursera, and Spotify, collectively facilitating billions of calls annually.

About This Role

Customers trust LiveKit with sensitive audio, video, and data belonging to their end users. A security failure poses significant risks to their data and business. The Infrastructure Security Engineer will join a small Trust team covering security, IT, and compliance, owning critical parts of the program from day one. Responsibilities include:

• Assessing and documenting the security posture of cloud and production infrastructure.
• Identifying gaps that could lead to customer data loss or infrastructure compromise, prioritizing a security debt backlog with engineering, and addressing the highest-risk items first.
• Harding identity, secrets, and network boundaries, including cloud IAM, environment separation, and credential hygiene.
• Securing infrastructure that runs customer-deployed voice AI agents, including tenant isolation, secrets for third-party model providers, and media/recording storage.
• Building guardrails and secure defaults into infrastructure as code to ensure the secure path is the easiest for engineers.
• Collaborating with the Compliance team to map infrastructure controls to PCI-DSS and ISO 27001, automating technical evidence for audits.

You'll Thrive at LiveKit If You

• Think like both a builder and a breaker, understanding security from first principles.
• Adopt an automation-first and pragmatic approach to risk mitigation.
• Translate security concerns into actionable engineering solutions.
• Communicate complex technical concepts clearly to non-technical stakeholders.
• Are a fast learner who thrives in ambiguity.

What You’ll Do

Detailed responsibilities include:

• Map and document the security posture of cloud and production infrastructure.
• Identify and prioritize security gaps, collaborating with engineering to mitigate risks.
• Strengthen identity, secrets, and network boundaries.
• Secure infrastructure for customer-deployed voice AI agents.
• Develop guardrails and secure defaults in infrastructure as code.
• Support compliance audits by automating technical evidence.

Who You Are

• Possess 5+ years of experience in security engineering, infrastructure engineering, or SRE, with a focus on infrastructure security.
• Have hands-on experience securing major cloud providers (AWS, GCP, or Azure) and containerized workloads, including Kubernetes.
• Owned infrastructure security for a production platform in previous roles.
• Fluent in infrastructure as code, such as Terraform, with strong scripting and automation skills in languages like Go or Python.
• Approach risk pragmatically, explaining the business impact and urgency of findings.

Nice to Have

• Experience with real-time media, networking, or WebRTC systems.
• Experience in AI security, such as securing LLM applications or agent infrastructure.
• Incident response or application security experience.
• Experience supporting compliance audits like PCI-DSS, ISO 27001, SOC 2, or HIPAA.

Our Commitment to You

• Build something truly impactful for the world.
• Contribute to open source alongside world-class engineers.
• Receive a competitive salary and equity package.
• Enjoy health, dental, and vision benefits.
• Benefit from a flexible vacation policy.