Security Engineer

LiveKit is building the infrastructure layer for the voice-driven era of computing. Their platform enables developers to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for companies like OpenAI, xAI, Salesforce, Coursera, and Spotify, collectively facilitating billions of calls annually.

About This Role

LiveKit’s customers rely on them for handling audio, video, and data belonging to their end users. A security failure poses significant risks to their data and business. They are hiring a Security Engineer to establish and manage their vulnerability management and security operations program. This program is foundational for maintaining a robust security posture as the platform and company grow, ensuring they know what they run, identify exposed areas, and expedite necessary fixes. The role involves shaping an early-stage program and joining a small Trust team that covers security, IT, and compliance. The engineer will own this program end-to-end from day one.

You'll Thrive at LiveKit If You

• Think like both a builder and a breaker, understanding security from first principles.
• Adopt an automation-first and pragmatic approach to risk mitigation.
• Translate security concerns into actionable engineering solutions.
• Can clearly communicate complex technical concepts to non-technical stakeholders.
• Are a fast learner who thrives in ambiguity.

What You’ll Do

• Select, deploy, and operationalize scanning tooling across production assets.
• Manage vulnerability management end-to-end, including triage, severity assessment, owner assignment, remediation SLAs, and reporting.
• Build engineering-first triage and remediation workflows that align with existing engineering processes and automate routing and follow-ups.
• Develop a remediation dashboard for engineering and leadership to monitor and act on.
• Automate evidence collection for compliance programs in collaboration with the Compliance team.
• Create automation and agentic tooling to reduce manual security operations work and keep pace with engineering growth.

Who You Are

• Possess 5+ years of experience in security engineering, security operations, or software engineering, with a significant focus on security.
• Have hands-on experience building or running a vulnerability management program or software security tooling (e.g., SCA, container, cloud, or host scanning).
• Adopt an engineering-first approach to triage and remediation, ensuring findings are fixed efficiently.
• Can accurately assess the severity of findings in their environment, using CVSS as one input.
• Have strong scripting and automation skills in languages like Go or Python, and familiarity with infrastructure as code such as Terraform.
• Approach risk pragmatically, explaining why a finding matters to the business and the urgency of its fix.

Nice to Have

• Experience with real-time media, networking, or WebRTC systems.
• Experience supporting compliance audits such as HIPAA, PCI-DSS, ISO 27001, or SOC 2.
• Background in incident response or application security.
• Experience in AI security, such as securing LLM applications or agent infrastructure.

Our Commitment to You

• An opportunity to build something truly impactful for the world.
• Contribute to open-source projects alongside world-class engineers.
• Competitive salary and equity package.
• Comprehensive benefits including health, dental, and vision coverage.
• Flexible vacation policy.