1 month ago
Remote, United StatesMid Level / Senior
H1B sponsor
Base Salary
$150k - $245k/yr
Responsibilities
- Build and maintain security controls across bare-metal hosts and AWS, including access management, network segmentation, firewalling, encryption, secrets management, logging, detection, endpoint security, and vulnerability management.
- Automate Linux host hardening and configuration management with Ansible across hundreds of hosts.
- Secure Docker image pipelines, registries, runtime environments, and container secrets.
- Own vulnerability, patch, update, and exception-management programs across servers, endpoints, base images, operating systems, packages, firmware, and dependencies.
- Manage penetration-testing scoping, vendor selection, remediation tracking, retesting, and customer-shareable summaries.
- Write and tune detections, improve telemetry and security-agent coverage, and participate in incident response.
- Automate recurring log and access reviews and evidence collection for SOC 2, PCI DSS, and ISO 27001 audits.
- Harden GitHub Actions and software supply-chain controls, including dependency and secret scanning, action pinning, SBOMs, signing, and least-privilege OIDC.
- Apply AI and agentic tools to security work and help secure company AI usage.
- Provide technical security input for customer questionnaires, architecture reviews, penetration-test summaries, and self-hosted deployment guidance.
Requirements
- Production experience owning security or security-focused infrastructure controls.
- Deep Linux experience, including hardening and debugging physical hosts, users and sudo, SSH, systemd, kernel and package updates, firewalls, and host agents.
- Required fleet-scale Ansible experience and strong scripting with Python and/or Go plus shell competence.
- Production experience securing Docker containers and their build pipelines.
- Hands-on experience securing GitHub and GitHub Actions, including branch protection, CODEOWNERS, workflow permissions, secrets, and third-party action risk.
- Experience operating vulnerability and patch management programs and driving remediation with engineering teams.
- Experience managing third-party penetration tests through remediation and retesting.
- Hands-on participation in at least one ISO 27001, PCI DSS, or SOC 2 audit as the engineer producing and defending evidence.
- Comfort using AI coding and agentic tools while understanding prompt injection, secret leakage, and supply-chain risks.
- Preferred qualifications include datacenter or colocation experience, Wazuh/OSSEC/Elastic detection or SIEM/HIDS ownership, HashiCorp Vault, AWS security, Terraform, Kubernetes security, offensive security, PCI DSS in cardholder-data environments, secure SDLC ownership, GPU or ML infrastructure, and OSCP, GIAC, CISSP, or AWS Security Specialty certifications.
Benefits
- The role is open to strong mid-level and senior candidates, with title, scope, and compensation calibrated to demonstrated experience.
- The position reports to the Director of Information Security and works closely with a separate GRC and Security Compliance Lead.
About Deepgram
Deepgram builds Voice AI infrastructure for developers, offering speech-to-text, text-to-speech, and voice agent tooling through real-time APIs and deployable on-prem software. Privately held and founded in 2015, the company is headquartered in San Francisco. Customers such as Twilio, Cloudflare, and Jack in the Box use its models to power production voice features; products include Nova-3 STT, Aura TTS, and a Voice Agent API.