Security Engineer, Infrastructure Security

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Assess the security posture of cloud and production infrastructure and establish a documentation baseline.

• Identify security vulnerabilities in the infrastructure that could result in customer data loss or compromise.

• Collaborate with engineering to prioritize the security debt backlog and address the most critical risks.

• Strengthen identity management, secrets management, and network boundaries, which include cloud IAM, environment separation, and credential hygiene.

• Secure the infrastructure for customer-deployed voice AI agents, ensuring tenant isolation, safeguarding third-party model-provider secrets, and managing media and recording storage.

• Incorporate guardrails and secure defaults into infrastructure as code.

• Collaborate with Compliance to align infrastructure controls with PCI-DSS and ISO 27001 standards.

• Automate the technical evidence necessary for compliance audits.

• Take ownership of significant aspects of LiveKit's infrastructure security program within the Trust team.

⛳️ Requirements

• A minimum of 5 years in security engineering, infrastructure engineering, or SRE, with a considerable focus on infrastructure security.

• Practical experience securing AWS, GCP, or Azure environments.

• Experience securing containerized workloads, particularly with Kubernetes.

• Proven history of managing infrastructure security for a production platform.

• Proficiency with infrastructure as code tools such as Terraform.

• Strong skills in scripting and automation using Go or Python.

• A pragmatic approach to risk, with the ability to articulate business impact and the urgency of remediation.

• Experience with real-time media, networking, or WebRTC systems (preferred).

• Background in AI security, including the protection of LLM applications or agent infrastructure (preferred).

• Experience in incident response or application security (preferred).

• Familiarity with supporting PCI-DSS, ISO 27001, SOC 2, or HIPAA compliance audits (preferred).

• Legally authorized to work in the US or your country of residence.

• Must indicate whether future sponsorship support is needed.

🏝️ Benefits

• Competitive salary.

• Equity package.

• Health, dental, and vision benefits.

• Flexible vacation policy.

• Opportunity to contribute to open source alongside world-class engineers.