Security Engineer, Vulnerability Management at LiveKit

About LiveKit

LiveKit is building the infrastructure layer for the voice driven era of computing. The platform provides developers with everything needed to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of other companies, collectively facilitating billions of calls each year.

About This Role

Customers trust LiveKit with audio, video, and data belonging to their own end users, so a security failure on LiveKit's side puts their data and their business at risk. LiveKit is hiring a Security Engineer to build and run its vulnerability management and security operations program.

Vulnerability management is a core capability for keeping the security posture strong as the platform and the company grow: knowing what is run, finding what is exposed, and getting the right fixes shipped quickly. It also underpins customer commitments and the compliance programs being built. The program is early, and you will shape it. You will join a small Trust team that covers security, IT, and compliance, and you will own this program end to end from your first week.

You'll Thrive at LiveKit If You

• Think like both a builder and a breaker, and understand security from first principles
• Take an automation first and pragmatic approach to risk mitigation
• Translate security concerns into engineering action
• Can clearly explain complex technical concepts to others
• Are a fast learner and thrive in ambiguity

What You'll Do

• Select, deploy, and operationalize scanning tooling across production assets.
• Run vulnerability management end to end: triage, severity assessment in the environment, owner assignment, remediation SLAs, and reporting.
• Build engineering first triage and remediation workflows that fit how engineering teams already work, and automate the routing and follow up.
• Build a remediation dashboard that engineering and leadership read and act on.
• Automate collection of the vulnerability management evidence that compliance programs depend on, in partnership with the Compliance team.
• Build automation, including agentic tooling, that removes manual security operations work and keeps pace with engineering growth.

Who You Are

• 5+ years in security engineering, security operations, or software engineering, with a significant share of that focused on security.
• Hands on experience building or running a vulnerability management program or software security tooling (SCA, container, cloud, or host scanning).
• An engineering first approach to triage and remediation: you get findings fixed by making the fix easy to ship.
• The judgment to set a finding's real severity in the environment, using CVSS as one input.
• Strong scripting and automation skills in a language such as Go or Python, and comfort reading infrastructure as code such as Terraform.
• A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed.

Nice to Have

• Experience with real time media, networking, or WebRTC systems.
• Experience supporting compliance audits such as HIPAA, PCI DSS, ISO 27001, or SOC 2.
• Incident response or application security experience.
• Experience in AI security, such as securing LLM applications or agent infrastructure.

Our Commitment to You

• An opportunity to build something truly impactful to the world
• Contribute to open source alongside world class engineers
• Competitive salary and equity package
• Health, dental, and vision benefits
• Flexible vacation policy

LiveKit is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact [email protected].