Security Engineer - AI-Driven Infra & Compliance

Apply; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Deepgram is seeking a Security Engineer to build and automate the security controls behind our security program. You will own host hardening, vulnerability management, patching, and penetration testing across bare-metal and AWS, with CI/CD security enhancements and auditable evidence.

You will apply AI and agentic tooling to improve security outcomes, while collaborating with a high-trust engineering culture and reporting to the Director of Information Security.

Qualifications

• Solid experience in security engineering or infrastructure engineering with a security focus and production ownership.
• Deep Linux expertise including hardening, debugging, and fleet management.
• Ansible at fleet scale is required and should be automated, documented, and reproducible.
• Strong scripting in Python and/or Go, plus solid shell skills.
• Production experience securing Docker containers and the pipelines that build them.
• Hands-on with GitHub and GitHub Actions: security, workflows, secrets, and risk.
• Experience running vulnerability and patch management as an ongoing program.
• Experience managing third-party penetration tests and turning reports into engineering work.
• Hands-on involvement in audits (ISO 27001, PCI DSS, SOC 2) as the engineer producing evidence.
• Comfort with AI tooling in daily work and understanding its risks.
• Pragmatic approach to control design and risk reduction.

Responsibilities

• Build, deploy, and maintain security controls across bare-metal fleet and AWS footprint.
• Own configuration management and host hardening as code to ensure reproducibility.
• Secure containerized workloads: Docker image pipelines, registry scanning, runtime hardening.
• Lead vulnerability management end to end with remediation and reporting.
• Own patch and update management program across servers, endpoints, and base images.
• Manage the penetration testing lifecycle from scoping to retest verification.
• Write detections, tune noise, and contribute to incident response.
• Automate evidence collection for SOC 2, PCI DSS, ISO 27001 audits.
• Harden CI/CD and the software supply chain, including SBOM and signing.
• Apply AI tooling to security work while managing risk.
• Provide technical input for customer security questionnaires and audits.

Skills

Security engineering

Linux hardening

Ansible at scale

Scripting (Python/Go)

Docker security

GitHub Actions security

Vulnerability management

Audit experience

AI tooling security

Threat detection

Tools

Ansible

Docker

GitHub Actions

Terraform

Job description

Deepgram is seeking a Security Engineer to build and automate the security controls behind our security program. You will own host hardening, vulnerability management, patching, and penetration testing across bare-metal and AWS, with CI/CD security enhancements and auditable evidence.

You will apply AI and agentic tooling to improve security outcomes, while collaborating with a high-trust engineering culture and reporting to the Director of Information Security.