Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, implement, and sustain security measures across Deepgram’s bare-metal infrastructure and AWS presence.

• Take charge of configuration management and host hardening as code utilizing Ansible across numerous Linux systems.

• Ensure the security of Docker container workloads, image build pipelines, registries, runtime environments, and sensitive information.

• Conduct vulnerability management from identification and prioritization to remediation tracking and reporting.

• Manage patch and update processes for servers, endpoints, base images, operating systems, packages, firmware, and dependencies.

• Oversee the penetration testing lifecycle, which includes scoping, vendor selection, scheduling, remediation tracking, retesting, and creating summaries for customers.

• Create detections, reduce false positives, engage in incident response, and enhance logging, telemetry, and security-agent coverage.

• Perform regular log and access reviews while automating evidence collection.

• Automate the collection of compliance evidence for SOC 2, PCI DSS, and ISO 27001, and assist with audit fieldwork.

• Strengthen GitHub Actions CI/CD and the software supply chain through scanning, action pinning, SBOMs, signing, and least-privilege OIDC.

• Utilize AI and agent-based tools in security tasks and contribute to securing the organization’s AI applications.

• Provide technical insights for customer security questionnaires, architectural responses, penetration-test summaries, and self-hosted hardening guidance.

• Report directly to the Director of Information Security.

⛳️ Requirements

• Extensive experience in security engineering or infrastructure engineering with a focus on security.

• Profound Linux expertise, including hardening, debugging, user management, SSH, systemd, kernel and package updates, host firewalls, and host-based agents.

• Proficiency in Ansible at fleet scale is essential.

• Strong scripting skills in Python and/or Go, along with shell scripting capabilities.

• Practical experience in securing Docker containers and build pipelines.

• Hands-on experience securing GitHub and GitHub Actions, including branch protection, CODEOWNERS, workflow permissions, secrets management, and assessing third-party action risks.

• Experience in executing vulnerability and patch management as a continuous program.

• Proven track record of managing third-party penetration tests.

• Direct involvement in at least one formal audit: ISO 27001, PCI DSS, or SOC 2.

• Comfort with utilizing AI coding and agentic tools in daily tasks, along with an understanding of prompt injection, secret leakage, and supply chain vulnerabilities.

• A pragmatic approach to implementing security controls.

• Eligibility to work in the United States and answer questions related to work authorization and visa sponsorship.

• Preferred: experience in datacenter or colocation environments.

• Preferred: detection engineering or ownership of SIEM/HIDS at scale.

• Preferred: familiarity with HashiCorp Vault.

• Preferred: knowledge of AWS security and Terraform.

• Preferred: expertise in Kubernetes security.

• Preferred: background in offensive security.

• Preferred: experience with PCI DSS in a cardholder data environment.

• Preferred: ownership of secure SDLC processes.

• Preferred: experience with GPU infrastructure, ML platforms, or multi-tenant inference workloads.

• Preferred: certifications such as OSCP, GIAC, CISSP, or AWS Security Specialty.

🏝️ Benefits

• Equity.

• 10% annual bonus.

• Bonus compensation.

• Base salary range determined by work location, job-related skills, and experience.