Security Engineer, Vulnerability Management
LiveKit
•$200,000 - $300,000
About The Position
LiveKit is hiring a Security Engineer to build and run its vulnerability management and security operations program. The role is part of a small Trust team covering security, IT, and compliance, and owns the vulnerability management program end to end. The program is early, so the engineer will shape its approach as LiveKit and its platform grow. The work helps protect customer audio, video, and data, strengthen security posture, and support customer commitments and compliance programs.
Requirements
- At least 5 years of experience in security engineering, security operations, or software engineering, with a significant share focused on security.
- Hands-on experience building or running a vulnerability management program or software security tooling, such as SCA, container, cloud, or host scanning.
- An engineering-first approach to triage and remediation, making fixes easy for teams to ship.
- Judgment to assess the real severity of findings in the operating environment, using CVSS as one input.
- Strong scripting and automation skills in a language such as Go or Python.
- Comfort reading infrastructure as code such as Terraform.
- A pragmatic approach to risk, including the ability to explain business impact and appropriate remediation timelines.
Nice To Haves
- Experience with real-time media, networking, or WebRTC systems.
- Experience supporting compliance audits such as HIPAA, PCI-DSS, ISO 27001, or SOC 2.
- Incident response or application security experience.
- Experience in AI security, such as securing LLM applications or agent infrastructure.
Responsibilities
- Select, deploy, and operationalize scanning tools across production assets.
- Run vulnerability management end to end, including triage, severity assessment in context, owner assignment, remediation SLAs, and reporting.
- Build engineering-first triage and remediation workflows that fit existing engineering practices, and automate routing and follow-up.
- Build a remediation dashboard for engineering teams and leadership.
- Automate collection of vulnerability management evidence required by compliance programs in partnership with the Compliance team.
- Build automation, including agentic tooling, to reduce manual security operations work and keep pace with engineering growth.
Benefits
- Competitive salary and equity package.
- Health, dental, and vision benefits.
- Flexible vacation policy.
- Opportunity to build something impactful to the world.
- Opportunity to contribute to open source alongside world-class engineers.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
