Staff Security Engineer at LiveKit

About LiveKit

LiveKit is developing the foundational infrastructure for the next generation of computing: the agentic era. Our comprehensive platform equips developers with all the necessary tools to build, test, deploy, scale, and monitor AI agents in live production environments. Established in 2021, LiveKit currently powers voice and agentic AI applications for major companies like OpenAI, Salesforce, Spotify, and Meta, alongside tens of thousands of other developers, collectively managing billions of calls annually.

About This Role

This is not a traditional security role focused solely on running scans or drafting policies that go unused. We are seeking a true engineer, someone who possesses both a builder's and a breaker's mindset. This role requires deep technical engagement across the stack, whether it involves an API endpoint, a container image, or a browser sandbox. You have an innate understanding of how systems should function and what occurs when they fail. While some security professionals gravitate towards policy, compliance, or auditing (areas we also value), we are looking for an individual eager to write code, secure complex systems, investigate intricate bugs, and comprehensively harden our platform. This position demands proactive action, not merely identifying what needs to be done.

You'll Thrive Here If You

• Approach security from fundamental principles, thinking like both a builder and a breaker.
• Are adept at analyzing systems to uncover weaknesses in business logic, configuration, or code.
• Can effectively translate security concerns into actionable engineering tasks, avoiding being a blocker.
• Are an exceptional communicator capable of documenting and advocating for best practices throughout the organization.
• Stay informed about the latest security research, tools, and threats, and apply that knowledge effectively.

What You'll Do

• Take ownership of security across the entire technology stack, including applications, services, infrastructure, and developer workflows.
• Proactively identify, assess, and mitigate risks within both infrastructure and application codebases.
• Lead secure code reviews, architectural discussions, and threat modeling sessions.
• Develop tooling and automations to proactively prevent security vulnerabilities before they reach production.
• Strengthen authentication and access control mechanisms across all internal and external surfaces.
• Collaborate closely with engineers across various teams to design APIs, workflows, and deployments that are secure by default.
• Investigate vulnerabilities, respond to security incidents, and manage disclosure processes as necessary.

Who You Are

• Possess 6+ years of experience as a software engineer with a strong passion for security engineering.
• Have significantly contributed to or led security engineering initiatives across applications, infrastructure, or both.
• Are experienced with threat modeling, secure coding practices, and vulnerability management.
• Have worked with CI/CD systems, cloud platforms (such as AWS, Google Cloud), and containerized environments.
• Have experience responding to real-world security incidents, leading postmortems, or driving remediation efforts.

Nice to Have

• Experience conducting security reviews for WebRTC, media pipelines, or real time systems.
• Contributions to open-source security tools or research.
• Hands-on experience with static and dynamic analysis tools, fuzzing, or sandboxing.
• Prior experience building (or attempting to build) something with LiveKit.

Our Commitment to You

• The opportunity to build something genuinely impactful on a global scale.
• Contribute to open source projects alongside world class engineers.
• A competitive salary and equity package.
• Comprehensive health, dental, and vision benefits.
• A flexible vacation policy.

LiveKit is an equal opportunity employer and does not discriminate based on any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact [email protected].