LiveKit - Security Engineer, Infrastructure Security

Remote - United States (Remote)1w ago

Remote Senior NA Cloud Computing Artificial Intelligence Security Engineer Infrastructure Engineer Documentation AWS GCP Azure Kubernetes Terraform Go Python WebRTC Close

Requirements

• 5+ years in security engineering, infrastructure engineering or SRE, with a significant share of that focused on infrastructure security. • Hands-on experience securing a major cloud provider (AWS, GCP or Azure) and containerized workloads including Kubernetes. • A track record of owning infrastructure security for a production platform. • Fluency with infrastructure as code such as Terraform, and strong scripting and automation skills in a language such as Go or Python. • A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed. • Experience with real-time media, networking or WebRTC systems. • Experience in AI security, such as securing LLM applications or agent infrastructure. • Incident response or application security experience. • Experience supporting compliance audits such as PCI-DSS, ISO 27001, SOC 2 or HIPAA. • OUR COMMITMENT TO YOU • An opportunity to build something truly impactful to the world • Contribute to open source alongside world-class engineers

Responsibilities

• Map the security posture of our cloud and production infrastructure and turn it into a documented baseline. • Find the gaps that could lead to customer data loss or infrastructure compromise, agree a prioritized security debt backlog with engineering, and close the highest-risk items first. • Harden identity, secrets and network boundaries, including cloud IAM, environment separation and credential hygiene. • Secure the infrastructure that runs customer-deployed voice AI agents: tenant isolation, secrets for third-party model providers, and media and recording storage. • Build guardrails and secure defaults into our infrastructure as code so the secure path is the easy one for engineers. • Partner with our Compliance team to map infrastructure controls to PCI-DSS and ISO 27001 and automate the technical evidence those audits depend on.