Security Engineer: AI-Driven Infra & Compliance

Deepgram; San Francisco (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Deepgram is seeking a hands-on Security Engineer to build and automate controls across bare-metal fleet and AWS, with a focus on host hardening, vulnerability management, container security, and CI/CD security. You will own patching, penetration testing lifecycle, and audit-ready evidence while applying AI tooling to secure our systems.

The role reports to the Director of Information Security and requires pragmatic, production-grade security practices across SOC 2, PCI DSS, and ISO 27001

Qualifications

• Solid experience in security engineering or infrastructure engineering with a security focus.
• Deep Linux knowledge: hardening, debugging, large fleet management, sudo and SSH.
• Ansible at fleet scale for reproducible baselines.

Responsibilities

• Build, deploy, and maintain security controls across bare-metal and AWS.
• Own configuration management and host hardening as code with Ansible.
• Secure containerized workloads: Docker pipelines, registry scanning, runtime hardening, secrets management.

Skills

Security engineering

Linux hardening

Ansible

Python

Go

Docker security

GitHub Actions

Vulnerability management

Penetration testing

Audit experience

AI tooling

Risk-based controls

Tools

Docker

Ansible

GitHub Actions

Job description

Deepgram is seeking a hands-on Security Engineer to build and automate controls across bare-metal fleet and AWS, with a focus on host hardening, vulnerability management, container security, and CI/CD security. You will own patching, penetration testing lifecycle, and audit-ready evidence while applying AI tooling to secure our systems.

The role reports to the Director of Information Security and requires pragmatic, production-grade security practices across SOC 2, PCI DSS, and ISO 27001