Security Engineer, Vulnerability Management & Security Operations

About this role

Own and build LiveKit’s vulnerability management and security operations program as the company and platform grow. You’ll operationalize scanning, drive practical remediation with engineering teams, and automate security workflows and compliance evidence collection.

About the company

LiveKit provides open-source and cloud real-time media infrastructure for building voice, video, and AI agent experiences.

The team

Trust team, covering security, IT, and compliance.

Stack

What you'll do

• Select, deploy, and operate vulnerability scanning tools across production assets.
• Run vulnerability management end to end, including triage, risk severity, ownership, remediation SLAs, and reporting.
• Build engineering-friendly remediation workflows and automate routing and follow-up.
• Create a remediation dashboard for engineering teams and leadership.
• Automate collection of vulnerability management evidence for compliance programs.
• Build automation, including agentic tooling, to reduce manual security operations work.

What we're looking for

• 5+ years in security engineering, security operations, or software engineering, with significant security experience.
• Hands-on experience building or running vulnerability management programs or security scanning tools.
• Ability to set contextual finding severity, using CVSS as one input.
• Strong scripting and automation skills in Go, Python, or similar; comfortable reading Terraform.
• Pragmatic risk judgment and ability to translate security concerns into engineering action.

Nice to have

• Experience with real-time media, networking, or WebRTC.
• Experience supporting HIPAA, PCI-DSS, ISO 27001, or SOC 2 audits.
• Incident response or application security experience.
• Experience securing LLM applications or agent infrastructure.

Benefits

• Equity package
• Health, dental, and vision benefits
• Flexible vacation policy