Security Engineer: Secure AI Infrastructure at Scale

Deepgram; United States; Remote; USD 140,000 - 240,000; Full time

Job summary

Deepgram is seeking a Security Engineer to build and automate the technical controls behind our security program. Most of our infrastructure is bare metal in colocation datacenters — GPU-intensive, running containerized workloads on Docker, managed with Ansible, and shipped through CI/CD on GitHub Actions — with AWS used for overflow capacity and a small set of services.

Our engineering culture is high-trust and fast-moving.

Qualifications

• Solid experience in security engineering or infrastructure engineering with a security focus.
• Deep Linux: profiling and hardening a large fleet of Linux hosts.
• Ansible at fleet scale is required (automation first, documentation second).
• Strong scripting: Python and/or Go; solid shell skills.
• Production experience securing Docker containers and CI/CD pipelines.

Responsibilities

• Build, deploy, and maintain security controls across bare-metal fleet and AWS footprint.
• Own configuration management and host hardening as code with Ansible.
• Secure containerized workloads: Docker pipelines, registry scanning, runtime hardening, secrets management.
• Run vulnerability management end-to-end, prioritizing exploitability and remediation with engineering teams.
• Own patch and update management program across servers and workstations; set SLAs and automate routine cases.
• Own the penetration testing lifecycle from scoping to retest and reporting.
• Write detections, tune noise, and contribute to incident response with improved telemetry.
• Run periodic log and access reviews and automate evidence collection for audits.
• Automate compliance evidence collection for SOC 2, PCI DSS, ISO 27001 and support audit fieldwork.

Skills

Security engineering

Linux expertise

Ansible fleet scale

Python/Go scripting

Docker security & CI/CD

GitHub Actions security

Tools

HashiCorp Vault

Wazuh OSSEC Elastic

Terraform

Job description

Deepgram is seeking a Security Engineer to build and automate the technical controls behind our security program. Most of our infrastructure is bare metal in colocation datacenters — GPU-intensive, running containerized workloads on Docker, managed with Ansible, and shipped through CI/CD on GitHub Actions — with AWS used for overflow capacity and a small set of services.

Our engineering culture is high-trust and fast-moving.