LiveKit Logo

LiveKit

Security Engineer, Infrastructure Security

Posted An Hour Ago
Be an Early Applicant
Remote
Hiring Remotely in United States
Senior level
Remote
Hiring Remotely in United States
Senior level
Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.
The summary above was generated by AI
About LiveKit

LiveKit is building the infrastructure layer for the voice-driven era of computing. Our platform gives developers everything they need to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others, collectively facilitating billions of calls each year.

About This Role

Our customers trust us with audio, video and data belonging to their own end users, so a security failure on our side puts their data and their business at risk. We are hiring an Infrastructure Security Engineer to improve the security posture of the production platform that carries that data. You will join a small Trust team that covers security, IT and compliance, and you will own real parts of the program from your first week. You will build our understanding of infrastructure security posture, then prioritize and drive remediation by business impact. Where the same class of problem keeps coming back, you will build the guardrails and security building blocks that let our security scale with the business.

You'll thrive at LiveKit if you
  • think like both a builder and a breaker, and understand security from first principles

  • take an automation-first and pragmatic approach to risk mitigation

  • translate security concerns into engineering action

  • can clearly explain complex technical concepts to others

  • are a fast learner and thrive in ambiguity

What You’ll Do
  • Map the security posture of our cloud and production infrastructure and turn it into a documented baseline.

  • Find the gaps that could lead to customer data loss or infrastructure compromise, agree a prioritized security debt backlog with engineering, and close the highest-risk items first.

  • Harden identity, secrets and network boundaries, including cloud IAM, environment separation and credential hygiene.

  • Secure the infrastructure that runs customer-deployed voice AI agents: tenant isolation, secrets for third-party model providers, and media and recording storage.

  • Build guardrails and secure defaults into our infrastructure as code so the secure path is the easy one for engineers.

  • Partner with our Compliance team to map infrastructure controls to PCI-DSS and ISO 27001 and automate the technical evidence those audits depend on.

Who You Are
  • 5+ years in security engineering, infrastructure engineering or SRE, with a significant share of that focused on infrastructure security.

  • Hands-on experience securing a major cloud provider (AWS, GCP or Azure) and containerized workloads including Kubernetes.

  • A track record of owning infrastructure security for a production platform.

  • Fluency with infrastructure as code such as Terraform, and strong scripting and automation skills in a language such as Go or Python.

  • A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed.

Nice to Have
  • Experience with real-time media, networking or WebRTC systems.

  • Experience in AI security, such as securing LLM applications or agent infrastructure.

  • Incident response or application security experience.

  • Experience supporting compliance audits such as PCI-DSS, ISO 27001, SOC 2 or HIPAA.

Our Commitment to You
  • An opportunity to build something truly impactful to the world

  • Contribute to open source alongside world-class engineers

  • Competitive salary and equity package

  • Health, dental, and vision benefits

  • Flexible vacation policy

LiveKit is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact [email protected].

Similar Jobs

2 Days Ago
Remote
United States
174K-261K Annually
Senior level
174K-261K Annually
Senior level
Artificial Intelligence • Productivity • Software • Automation
Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.
Top Skills: AWSCi/CdCloudFormationDockerGoInfrastructure-As-CodeJavaScriptKubernetesPythonTerraformWiz
17 Days Ago
Remote
USA
175K-220K Annually
Senior level
175K-220K Annually
Senior level
Fintech • Payments • Software • Financial Services
Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.
Top Skills: AnchorAWSCi/CdContainer SecurityDependency ScanningGoHsmsIamLlmsMcpMpcPkiPythonRustSastSecrets ScanningSoc 2SolanaTypescript
One Month Ago
Remote
United States
175K-275K Annually
Senior level
175K-275K Annually
Senior level
Software
Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.
Top Skills: Authorization SystemsCert-ManagerDistributed SystemsEgress ProxiesIdentity CertificatesJwtKubernetesOpaPkiSecrets ManagementSpiffeSpireWorkload IdentityX.509 Certificates

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

  • Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
  • Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
  • Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
  • Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
  • Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account