Security Engineer

LiveKit builds infrastructure for the agentic era of computing, enabling developers to build, deploy, scale, and observe AI agents in production. The Security Engineer will build security foundations for LiveKit’s infrastructure, focusing on infrastructure security posture or vulnerability management and security operations. The role includes securing cloud and production environments, automating security workflows, supporting compliance programs, and participating in incident response.

Responsibilities:

• Map the security posture of our cloud and production infrastructure, find the gaps that could lead to customer data loss or infrastructure compromise, and close them in priority order
• Operationalize scanning tooling across cloud, containers, hosts and dependencies, and run vulnerability management end to end: triage, owner assignment, remediation SLAs and reporting
• Harden identity, secrets and network boundaries, including environment separation and credential hygiene
• Build automation that removes manual security work and keeps pace with engineering growth
• Build engineering-first triage and remediation workflows with engineering teams, and make the secure path the easy one
• Automate collection of the technical evidence our PCI-DSS and ISO 27001 programs depend on, in partnership with our Compliance team
• Take part in incident response and a shared security escalation rotation

Requirements:

• think like both a builder and a breaker, and understand security from first principles
• take an automation-first and pragmatic approach to risk mitigation
• translate security concerns into engineering action
• can clearly explain complex technical concepts to others
• are a fast learner and thrive in ambiguity
• 5+ years in security engineering, infrastructure engineering or SRE, with a significant share of that focused on security
• For infrastructure security: hands-on experience securing a major cloud provider (AWS, GCP or Azure) and containerized workloads including Kubernetes, a track record of owning infrastructure security for a production platform, and experience supporting compliance audits such as PCI-DSS, ISO 27001 or SOC 2
• For vulnerability management and security operations: hands-on experience building or running vulnerability management or software security tooling, with an engineering-first approach to triage and remediation
• Strong scripting and automation skills in a language such as Go or Python, and fluency with infrastructure as code such as Terraform
• A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed
• Experience with real-time media, networking or WebRTC systems
• Experience in AI security, such as securing LLM applications or agent infrastructure
• Incident response or application security experience
• Experience supporting compliance audits