Security Engineer building LiveKit’s vulnerability management and security operations program. Securing infrastructure for the company’s voice, video, and AI application platform.
Responsibilities
Select, deploy and operationalize scanning tooling across production assets
Run vulnerability management end to end, including triage, severity assessment, owner assignment, remediation SLAs and reporting
Build engineering-first triage and remediation workflows aligned with existing engineering practices
Automate finding routing and follow-up
Build a remediation dashboard for engineering and leadership
Automate collection of vulnerability management evidence needed by compliance programs in partnership with the Compliance team
Build automation, including agentic tooling, to reduce manual security operations work and keep pace with engineering growth
Own the vulnerability management and security operations program end to end within the Trust team
Requirements
5+ years in security engineering, security operations or software engineering, with a significant share focused on security
Hands-on experience building or running a vulnerability management program or software security tooling, including SCA, container, cloud or host scanning
Engineering-first approach to triage and remediation
Judgment to set a finding's real severity in the environment, using CVSS as one input
Strong scripting and automation skills in Go or Python
Comfort reading infrastructure as code such as Terraform
Pragmatic approach to risk and ability to explain business impact and remediation urgency
Experience with real-time media, networking or WebRTC systems is a plus
Experience supporting HIPAA, PCI-DSS, ISO 27001 or SOC 2 compliance audits is a plus
Incident response or application security experience is a plus
Experience in AI security, such as securing LLM applications or agent infrastructure, is a plus
Legally authorized to work in the US or country of residence
Must indicate whether future sponsorship support is required
Benefits
Competitive salary
Equity package
Health, dental, and vision benefits
Flexible vacation policy
Opportunity to contribute to open source alongside world-class engineers
Junior SOC Analyst monitoring and responding to security incidents for Long View, a North American IT services provider. Supporting SIEM operations, cloud security, incident escalation, and 24x7 coverage.
IT Systems Administrator securing cloud, hardware, and network assets for an Alberta resource and environmental services group. Managing cybersecurity, infrastructure, procurement, and end - user support.
Cyber Defender protecting Ontinue’s AI - powered MXDR customers through SOC threat detection and response. Investigating threats across identity, endpoint, network, and cloud environments.
Security Operations Team Lead building Safe Software’s cybersecurity operations for FME, its enterprise data integration platform. Leading incident response, security tooling, compliance, and team growth.
SOC cybersecurity analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Improving 24×7 detection, investigation, and incident response capabilities.
SOC analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Investigating escalated alerts and improving 24×7 security operations.
Senior Security Operations Engineer monitoring incidents and leading forensics for Samsara’s IoT - connected operations platform. Building security automation and supporting insider - threat investigations.