Security Engineer, Vulnerability Management & Security Operations

LiveKit

1d•$200,000 - $300,000

About The Position

LiveKit is hiring a Security Engineer to build and run its vulnerability management and security operations program. The role will establish and operate a core capability for maintaining the security posture of LiveKit’s platform as the company grows, supporting customer commitments and compliance programs. The program is at an early stage, and the engineer will shape and own it end to end as part of a small Trust team covering security, IT, and compliance. The engineer will select and operationalize scanning tools across production assets; manage vulnerability triage, severity assessment, ownership, remediation SLAs, and reporting; and create engineering-oriented workflows and dashboards that support timely fixes. The role also includes automating compliance evidence collection and security operations work, including through agentic tooling. The role suits someone who combines a builder’s and breaker’s mindset, applies automation-first and pragmatic risk mitigation, translates security concerns into engineering action, communicates complex technical concepts clearly, and learns quickly in ambiguous situations.

Requirements

At least 5 years of experience in security engineering, security operations, or software engineering, with a significant share focused on security.
Hands-on experience building or operating a vulnerability management program or software security tooling, such as SCA, container, cloud, or host scanning.
An engineering-first approach to triage and remediation, with the ability to make fixes easy for teams to ship.
Ability to judge a finding’s real severity in the organization’s environment, using CVSS as one input.
Strong scripting and automation skills in a language such as Go or Python.
Comfort reading infrastructure as code such as Terraform.
A pragmatic approach to risk, including the ability to explain a finding’s business impact and the appropriate remediation timeline.

Nice To Haves

Experience with real-time media, networking, or WebRTC systems.
Experience supporting compliance audits such as HIPAA, PCI-DSS, ISO 27001, or SOC 2.
Incident response or application security experience.
Experience in AI security, such as securing LLM applications or agent infrastructure.

Responsibilities

Select, deploy, and operationalize scanning tools across production assets.
Run vulnerability management end to end, including triage, severity assessment in LiveKit’s environment, owner assignment, remediation SLAs, and reporting.
Build engineering-first triage and remediation workflows that fit existing engineering practices, and automate routing and follow-up.
Build a remediation dashboard that engineering teams and leadership use to take action.
Automate collection of vulnerability management evidence required by compliance programs, in partnership with the Compliance team.
Build automation, including agentic tooling, to reduce manual security operations work and scale with engineering growth.