Security Engineer, Infrastructure Security

LiveKit; Oregon; Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health, dental, and vision

Flexible vacation policy

Competitive salary

Equity package

Job summary

LiveKit is seeking an Infrastructure Security Engineer to strengthen the security posture of our production platform. You will own parts of the program from day one, building baseline security posture for our cloud and production environments and driving remediation with engineering and compliance teams.

You will harden identity, secrets, and network boundaries, and embed secure defaults into our infrastructure as code.

Qualifications

• 5+ years of experience in security engineering, infrastructure engineering or SRE with focus on infrastructure security.
• Hands-on experience securing major cloud providers (AWS/GCP/Azure) and containerized workloads like Kubernetes.
• Proven track record owning infrastructure security for production platforms.
• Fluency with infrastructure as code such as Terraform; strong scripting in Go or Python.
• Pragmatic risk mindset: can explain business impact and fix urgency.

Responsibilities

• Map the security posture of our cloud and production infrastructure into a documented baseline.
• Identify gaps that could lead to data loss or compromise; prioritize and close high-risk items with engineering.
• Harden identity, secrets, and network boundaries including cloud IAM and credential hygiene.
• Secure infrastructure for customer-deployed voice AI agents with tenant isolation and secure storage.
• Build guardrails and secure defaults into infrastructure as code to make secure paths easy for engineers.
• Collaborate with Compliance to map controls to PCI-DSS and ISO 27001 and automate audit evidence.

Skills

Security engineering

Cloud platforms (AWS/GCP/Azure)

Kubernetes security

Terraform / IaC

Go / Python scripting

Automation

Tools

Terraform

Kubernetes

CI/CD pipelines

Job description

LiveKitLiveKit is building the infrastructure layer for the voice-driven era of computing. Our platform gives developers everything they need to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others, collectively facilitating billions of calls each year.

About This Role

Our customers trust us with audio, video and data belonging to their own end users, so a security failure on our side puts their data and their business at risk. We are hiring an Infrastructure Security Engineer to improve the security posture of the production platform that carries that data. You will join a small Trust team that covers security, IT and compliance, and you will own real parts of the program from your first week. You will build our understanding of infrastructure security posture, then prioritize and drive remediation by business impact. Where the same class of problem keeps coming back, you will build the guard rails and security building blocks that let our security scale with the business.

You’ll thrive at LiveKit if you

• think like both a builder and a breaker, and understand security from first principles
• take an automation-first and pragmatic approach to risk mitigation
• translate security concerns into engineering action
• can clearly explain complex technical concepts to others
• are a fast learner and thrive in ambiguity

What You'll Do

• Map the security posture of our cloud and production infrastructure and turn it into a documented baseline.
• Find the gaps that could lead to customer data loss or infrastructure compromise, agree a prioritized security debt backlog with engineering, and close the highest-risk items first.
• Harden identity, secrets and network boundaries, including cloud IAM, environment separation and credential hygiene.
• Secure the infrastructure that runs customer-deployed voice AI agents: tenant isolation, secrets for third-party model providers, and media and recording storage.
• Build guardrails and secure defaults into our infrastructure as code so the secure path is the easy one for engineers.
• Partner with our Compliance team to map infrastructure controls to PCI-DSS and ISO 27001 and automate the technical evidence those audits depend on.

Who You Are

• 5+ years in security engineering, infrastructure engineering or SRE, with a significant share of that focused on infrastructure security.
• Hands-on experience securing a major cloud provider (AWS, GCP or Azure) and containerized workloads including Kubernetes.
• A track record of owning infrastructure security for a production platform.
• Fluency with infrastructure as code such as Terraform, and strong scripting and automation skills in a language such as Go or Python.
• A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed.

Nice to Have

• Experience with real-time media, networking or WebRTC systems.
• Experience in AI security, such as securing LLM applications or agent infrastructure.
• Incident response or application security experience.
• Experience supporting compliance audits such as PCI-DSS, ISO 27001, SOC 2 or HIPAA.

Our Commitment to You

• An opportunity to build something truly impactful to the world
• Contribute to open source alongside world-class engineers
• Competitive salary and equity package
• Health, dental, and vision benefits
• Flexible vacation policy

LiveKit is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact .