Security Engineer, Vulnerability Management

About this role

Build and operate LiveKit’s vulnerability management and security operations program as the company and platform grow. Own the process end to end, from scanning and risk triage to remediation workflows, reporting, and compliance evidence.

About the company

LiveKit provides open-source and cloud real-time media infrastructure for building voice, video, and AI agent experiences.

The team

Trust team, covering security, IT, and compliance.

Stack

What you'll do

• Select, deploy, and operate scanning tools across production assets.
• Manage vulnerability triage, severity assessment, ownership, remediation SLAs, and reporting.
• Create engineering-friendly remediation workflows and automate routing and follow-up.
• Build a remediation dashboard for engineering and leadership.
• Automate collection of vulnerability-management evidence for compliance.
• Build automation, including agentic tools, to reduce manual security operations work.

What we're looking for

• 5+ years in security engineering, security operations, or software engineering, with significant security experience.
• Hands-on experience building or running vulnerability management programs or security scanning tools.
• Strong scripting and automation skills in Go, Python, or similar languages.
• Comfort reading infrastructure as code such as Terraform.
• Ability to assess real-world severity and explain business risk and remediation urgency.
• Engineering-first approach to getting findings fixed.

Nice to have

• Experience with real-time media, networking, or WebRTC systems.
• Experience supporting HIPAA, PCI-DSS, ISO 27001, or SOC 2 audits.
• Incident response or application security experience.
• AI security experience, including LLM applications or agent infrastructure.

Benefits

• Equity package
• Health, dental, and vision benefits
• Flexible vacation policy
• Opportunity to contribute to open source