SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
LiveKit is building the infrastructure layer for voice-driven computing, powering voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others. The company facilitates billions of calls annually and is seeking a Security Engineer to strengthen the security posture of its production platform.
In this role, you will join a small Trust team covering security, IT, and compliance. You will own meaningful security initiatives from day one, building and executing a comprehensive infrastructure security program.
Key responsibilities include:
- Mapping the security posture of LiveKit's cloud and production infrastructure and establishing a documented baseline
- Identifying gaps that could lead to customer data loss or infrastructure compromise, prioritizing security debt by business impact, and driving remediation of high-risk items
- Hardening identity, secrets, and network boundaries across cloud IAM, environment separation, and credential hygiene
- Securing infrastructure for customer-deployed voice AI agents, including tenant isolation, third-party model provider secrets, and media/recording storage
- Building guardrails and secure defaults into infrastructure-as-code to make the secure path the easy path for engineers
- Partnering with the Compliance team to map infrastructure controls to PCI-DSS and ISO 27001, automating technical evidence for audits
You will thrive at LiveKit if you think like both a builder and a breaker, take an automation-first and pragmatic approach to risk mitigation, translate security concerns into engineering action, communicate complex technical concepts clearly, and learn quickly in ambiguous environments.
REQUIREMENTS:
- 5+ years in security engineering, infrastructure engineering, or SRE, with significant focus on infrastructure security
- Hands-on experience securing a major cloud provider (AWS, GCP, or Azure) and containerized workloads including Kubernetes
- Track record of owning infrastructure security for a production platform
- Fluency with infrastructure-as-code tools such as Terraform
- Strong scripting and automation skills in Go or Python
- Pragmatic approach to risk; ability to explain business impact and remediation timelines
NICE TO HAVE:
- Experience with real-time media, networking, or WebRTC systems
- AI security experience (securing LLM applications or agent infrastructure)
- Incident response or application security background
- Experience supporting compliance audits (PCI-DSS, ISO 27001, SOC 2, HIPAA)
