2 hours ago
Base Salary
$200k - $300k/yr
Responsibilities
- Select, deploy, and operationalize vulnerability scanning tools across production assets.
- Run vulnerability management end to end, including triage, severity assessment, ownership, remediation SLAs, and reporting.
- Build engineering-focused triage and remediation workflows and automate routing and follow-up.
- Create a remediation dashboard for engineering and leadership.
- Automate collection of vulnerability management evidence for compliance programs.
- Build automation and agentic tooling to reduce manual security operations work.
Requirements
- 5+ years of experience in security engineering, security operations, or software engineering, with a significant portion focused on security.
- Hands-on experience building or operating a vulnerability management program or security software tooling, including SCA, container, cloud, or host scanning.
- Engineering-first approach to triage and remediation, with the ability to make fixes easy to ship.
- Ability to determine the real severity of findings in context, using CVSS as an input.
- Strong scripting and automation skills in Go or Python and familiarity with infrastructure as code such as Terraform.
- Ability to explain security risks in business terms and determine appropriate remediation urgency.
- Preferred experience with real-time media, networking, or WebRTC systems.
- Preferred experience supporting HIPAA, PCI-DSS, ISO 27001, or SOC 2 compliance audits.
- Preferred incident response, application security, or AI security experience, including securing LLM applications or agent infrastructure.
Benefits
- Opportunity to build an impactful security program.
- Contribute to open source alongside experienced engineers.
- Competitive salary and equity package.
- Health, dental, and vision benefits.
- Flexible vacation policy.
About LiveKit
LiveKit builds open-source frameworks and a managed cloud platform for real-time voice, video, and AI agents used by software teams. Developers use it to build, deploy, scale, and observe agents, with products that include agent hosting and ultra-low-latency communications APIs. Founded in 2021 and privately held, LiveKit lists customers such as OpenAI, xAI, Salesforce, Coursera, and Spotify.