Security Engineer, Infrastructure Security

LiveKit is hiring an Infrastructure Security Engineer to improve the security posture of its production platform. The role focuses on assessing infrastructure risks, driving remediation, building security guardrails, and supporting technical compliance controls.

Responsibilities:

• Map the security posture of our cloud and production infrastructure and turn it into a documented baseline
• Find the gaps that could lead to customer data loss or infrastructure compromise, agree a prioritized security debt backlog with engineering, and close the highest-risk items first
• Harden identity, secrets and network boundaries, including cloud IAM, environment separation and credential hygiene
• Secure the infrastructure that runs customer-deployed voice AI agents: tenant isolation, secrets for third-party model providers, and media and recording storage
• Build guardrails and secure defaults into our infrastructure as code so the secure path is the easy one for engineers
• Partner with our Compliance team to map infrastructure controls to PCI-DSS and ISO 27001 and automate the technical evidence those audits depend on

Requirements:

• think like both a builder and a breaker, and understand security from first principles
• take an automation-first and pragmatic approach to risk mitigation
• translate security concerns into engineering action
• can clearly explain complex technical concepts to others
• are a fast learner and thrive in ambiguity
• 5+ years in security engineering, infrastructure engineering or SRE, with a significant share of that focused on infrastructure security
• Hands-on experience securing a major cloud provider (AWS, GCP or Azure) and containerized workloads including Kubernetes
• A track record of owning infrastructure security for a production platform
• Fluency with infrastructure as code such as Terraform, and strong scripting and automation skills in a language such as Go or Python
• A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed
• Experience with real-time media, networking or WebRTC systems
• Experience in AI security, such as securing LLM applications or agent infrastructure
• Incident response or application security experience
• Experience supporting compliance audits such as PCI-DSS, ISO 27001, SOC 2 or HIPAA