Security Engineer - AI-Driven Infra & Compliance

Deepgram; United States; On-site; USD 150,000 - 210,000; Full time

Job summary

Deepgram is seeking a Security Engineer to build and automate the controls behind our security program. You’ll own host hardening, vulnerability management, and CI/CD security for bare-metal fleets and AWS, with Docker and Ansible in the mix.

You’ll work in a high-trust, fast-moving engineering culture, using AI and agentic tooling to improve detections, incident response, logging, and compliance evidence for SOC 2, PCI DSS, and ISO 27001. This is hands-on security work.

Qualifications

• Solid experience in security engineering with ownership of controls in production.
• Deep Linux knowledge for a large fleet including hardening, debugging, and sudo access.
• Ansible at fleet scale is required; you automate first and document second.
• Experience securing Docker containers and CI/CD pipelines.
• Experience with audits (ISO 27001, PCI DSS, SOC 2) as an engineer producing evidence.

Responsibilities

• Build, deploy, and maintain security controls across bare-metal fleet and AWS — access management, network segmentation, encryption, logging, and vulnerability management.
• Own configuration management and host hardening as code with Ansible across hundreds of Linux hosts.
• Secure containerized workloads: Docker pipelines, registry scanning, runtime hardening, secrets management.
• Run vulnerability management end to end and drive remediation with engineering teams.
• Own patch and update management including SLAs and automation.
• Oversee penetration testing lifecycle: scoping, vendor selection, triage, retesting, and customer-facing summaries.
• Write detections and participate in incident response; improve logs and telemetry.
• Automate compliance evidence collection for SOC 2, PCI DSS, and ISO 27001; support audits.
• Harden GitHub Actions CI/CD and software supply chain security.
• Apply AI tooling to security work and proactively secure AI systems.

Skills

Linux expertise

Ansible

Scripting Python/Go

Docker security

GitHub Actions security

Vulnerability management

Penetration testing

Audit experience ISO 27001/SOC 2/PCI-D

AI tooling security

Secure SDLC

Tools

HashiCorp Vault

AWS security

Terraform

Wazuh

Kubernetes security

Job description

Deepgram is seeking a Security Engineer to build and automate the controls behind our security program. You’ll own host hardening, vulnerability management, and CI/CD security for bare-metal fleets and AWS, with Docker and Ansible in the mix.

You’ll work in a high-trust, fast-moving engineering culture, using AI and agentic tooling to improve detections, incident response, logging, and compliance evidence for SOC 2, PCI DSS, and ISO 27001. This is hands-on security work.