Security Engineer, Infrastructure Security

About this role

Improve the security posture of LiveKit’s cloud and production infrastructure, protecting customer audio, video, and data. You’ll assess and prioritize risks, remediate high-impact issues, and build automated guardrails and secure infrastructure defaults.

About the company

LiveKit provides open-source and cloud real-time media infrastructure for building voice, video, and AI agent experiences.

The team

Trust team, covering security, IT, and compliance.

Stack

What you'll do

• Assess cloud and production infrastructure security and document a baseline.
• Prioritize and remediate risks that could expose customer data or compromise infrastructure.
• Harden cloud IAM, secrets, environment separation, and network boundaries.
• Secure tenant isolation, third-party model-provider secrets, and media and recording storage.
• Build security guardrails and secure defaults into infrastructure as code.
• Map infrastructure controls to PCI-DSS and ISO 27001 and automate audit evidence.

What we're looking for

• 5+ years in security engineering, infrastructure engineering, or SRE, with substantial infrastructure security experience.
• Hands-on experience securing a major cloud provider and Kubernetes workloads.
• Track record owning infrastructure security for a production platform.
• Fluency with infrastructure as code such as Terraform and scripting in Go or Python.
• Ability to explain security risks in terms of business impact and remediation urgency.

Nice to have

• Experience with real-time media, networking, or WebRTC.
• Experience securing LLM applications or agent infrastructure.
• Incident response or application security experience.
• Experience supporting PCI-DSS, ISO 27001, SOC 2, or HIPAA audits.

Benefits

• Equity package
• Health, dental, and vision benefits
• Flexible vacation policy
• Opportunity to contribute to open source