2 hours ago
Base Salary
$200k - $300k/yr
Responsibilities
- Select, deploy, and operationalize vulnerability scanning tools across production assets.
- Own vulnerability management end to end, including triage, severity assessment, owner assignment, remediation SLAs, and reporting.
- Build engineering-focused triage and remediation workflows and automate routing and follow-up.
- Create a remediation dashboard used by engineering and leadership.
- Automate vulnerability management evidence collection for compliance programs in partnership with Compliance.
- Build automation and agentic tooling to reduce manual security operations work.
Requirements
- 5+ years of experience in security engineering, security operations, or software engineering, with a significant portion focused on security.
- Hands-on experience building or operating a vulnerability management program or software security tooling, including SCA, container, cloud, or host scanning.
- An engineering-first approach to vulnerability triage and remediation.
- Ability to assess the real severity of findings in context, using CVSS as one input.
- Strong scripting and automation skills in Go or Python and comfort reading infrastructure as code such as Terraform.
- Ability to explain security risks to the business and determine appropriate remediation urgency.
- Preferred experience includes real-time media, networking, WebRTC, compliance audits such as HIPAA, PCI-DSS, ISO 27001, or SOC 2, incident response, application security, and AI security for LLM applications or agent infrastructure.
Benefits
- Competitive salary and equity package.
- Health, dental, and vision benefits.
- Flexible vacation policy.
- Opportunity to contribute to open source alongside LiveKit engineers.
About LiveKit
LiveKit builds open-source frameworks and a managed cloud platform for real-time voice, video, and AI agents used by software teams. Developers use it to build, deploy, scale, and observe agents, with products that include agent hosting and ultra-low-latency communications APIs. Founded in 2021 and privately held, LiveKit lists customers such as OpenAI, xAI, Salesforce, Coursera, and Spotify.