Security Engineer, Infrastructure Security

LiveKit

1d•$200,000 - $300,000

About The Position

LiveKit is hiring an Infrastructure Security Engineer to improve the security posture of its production platform, which carries customer audio, video, and data. The role is part of a small Trust team spanning security, IT, and compliance, and includes ownership of program areas from the first week. The engineer will assess infrastructure security, prioritize remediation by business impact, and create scalable guardrails and security building blocks to address recurring risks. The role focuses on cloud and production infrastructure security, including identity, secrets, network boundaries, tenant isolation, and the infrastructure supporting customer-deployed voice AI agents. It also involves embedding secure defaults in infrastructure as code and partnering with Compliance to map infrastructure controls to PCI-DSS and ISO 27001 and automate audit evidence.

Requirements

At least 5 years of experience in security engineering, infrastructure engineering, or SRE, with a significant portion focused on infrastructure security.
Hands-on experience securing a major cloud provider (AWS, GCP, or Azure) and containerized workloads, including Kubernetes.
A track record of owning infrastructure security for a production platform.
Fluency with infrastructure as code such as Terraform, and strong scripting and automation skills in a language such as Go or Python.
A pragmatic approach to risk, including the ability to explain a finding’s business impact and urgency.
Thinks like both a builder and a breaker and understands security from first principles.
Takes an automation-first, pragmatic approach to risk mitigation.
Can translate security concerns into engineering action and clearly explain complex technical concepts.
Learns quickly and thrives in ambiguity.

Nice To Haves

Experience with real-time media, networking, or WebRTC systems.
Experience in AI security, such as securing LLM applications or agent infrastructure.
Incident response or application security experience.
Experience supporting compliance audits such as PCI-DSS, ISO 27001, SOC 2, or HIPAA.

Responsibilities

Map the security posture of cloud and production infrastructure and document a baseline.
Identify gaps that could lead to customer data loss or infrastructure compromise, agree on a prioritized security debt backlog with engineering, and remediate the highest-risk items first.
Harden identity, secrets, and network boundaries, including cloud IAM, environment separation, and credential hygiene.
Secure infrastructure running customer-deployed voice AI agents, including tenant isolation, third-party model provider secrets, and media and recording storage.
Build guardrails and secure defaults into infrastructure as code.
Partner with the Compliance team to map infrastructure controls to PCI-DSS and ISO 27001 and automate technical audit evidence.