SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
LiveKit is building infrastructure for the agentic era of computing, powering voice and AI applications for OpenAI, Salesforce, Spotify, Meta, and tens of thousands of developers, facilitating billions of calls annually.
You will join a small Trust team covering security, IT, and compliance, owning real parts of the security program from day one. Depending on your background, you will focus on either infrastructure security posture or vulnerability management and security operations.
Key responsibilities include:
- Map the security posture of cloud and production infrastructure, identify gaps that could lead to customer data loss or infrastructure compromise, and close them in priority order.
- Operationalize scanning tooling across cloud, containers, hosts, and dependencies; run vulnerability management end-to-end including triage, owner assignment, remediation SLAs, and reporting.
- Harden identity, secrets, and network boundaries, including environment separation and credential hygiene.
- Build automation that removes manual security work and keeps pace with engineering growth.
- Build engineering-first triage and remediation workflows with engineering teams, making the secure path the easy one.
- Automate collection of technical evidence for PCI-DSS and ISO 27001 compliance programs in partnership with the Compliance team.
- Participate in incident response and shared security escalation rotation.
You thrive by thinking like both a builder and breaker, understanding security from first principles, taking an automation-first and pragmatic approach to risk mitigation, translating security concerns into engineering action, clearly explaining complex technical concepts, and learning quickly in ambiguity.
REQUIREMENTS:
- 5+ years in security engineering, infrastructure engineering, or SRE, with significant focus on security.
- For infrastructure security track: hands-on experience securing a major cloud provider (AWS, GCP, or Azure) and containerized workloads including Kubernetes; track record of owning infrastructure security for a production platform; experience supporting compliance audits such as PCI-DSS, ISO 27001, or SOC 2.
- For vulnerability management and security operations track: hands-on experience building or running vulnerability management or software security tooling with an engineering-first approach to triage and remediation.
- Strong scripting and automation skills in Go or Python.
- Fluency with infrastructure as code such as Terraform.
- Pragmatic approach to risk: ability to explain why a finding matters to the business and how fast it needs to be fixed.
NICE TO HAVE:
- Experience with real-time media, networking, or WebRTC systems.
- Experience in AI security, such as securing LLM applications or agent infrastructure.
- Incident response or application security experience.
- Experience supporting compliance audits.
