Security Engineer, Vulnerability Management

Royper Royco LLC; United States; Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Open source contribution

Competitive salary & equity

Health, dental, and vision benefits

Flexible vacation

Job summary

LiveKit seeks a Security Engineer to own vulnerability management and security operations, shaping an end-to-end program for assets across the platform. You will drive tooling, triage, remediation, and reporting in collaboration with Engineering and Compliance.

You’ll need 5+ years in security roles, strong automation skills (Go/Python) and Terraform, and a pragmatic view of risk to balance security with product velocity. This is a US-based opportunity.

Qualifications

• 5+ years in security engineering or security operations.
• Hands-on experience building or running vulnerability management programs or security tooling (SCA, container, cloud or host scanning).
• Engineering-first triage and remediation: fix should be easy to ship.
• Ability to set findings' severity using CVSS as an input.
• Strong scripting in Go or Python and familiarity with IaC (Terraform).
• Pragmatic risk reasoning, able to explain business impact and urgency.

Responsibilities

• Select, deploy and operationalize scanning tooling across production assets.
• Run vulnerability management end to end: triage, severity, owner assignment, remediation SLAs and reporting.
• Build engineering-first triage and remediation workflows and automate routing and follow-up.
• Build a remediation dashboard for engineering and leadership to read and act on.
• Automate collection of vulnerability management evidence with Compliance.
• Build automation including agentic tooling to remove manual security operations work.

Skills

Security engineering

Vulnerability management

Go/Python scripting

Terraform

Security tooling

Tools

SCA

Container scanning

Cloud scanning

Host scanning

Terraform

Job description

LiveKit is building the infrastructure layer for the voice-driven era of computing. Our platform gives developers everything they need to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others, collectively facilitating billions of calls each year.

About This Role

Our customers trust us with audio, video and data belonging to their own end users, so a security failure on our side puts their data and their business at risk. We are hiring a Security Engineer to build and run our vulnerability management and security operations program. Vulnerability management is a core capability for keeping our security posture strong as the platform and the company grow: knowing what we run, finding what is exposed, and getting the right fixes shipped quickly.

It also underpins our customer commitments and the compliance programs we are building. Our program is early, and you will shape it. You will join a small Trust team that covers security, IT and compliance, and you will own this program end to end from your first week.

You'll thrive at LiveKit if you

• think like both a builder and a breaker, and understand security from first principles
• take an automation-first and pragmatic approach to risk mitigation
• translate security concerns into engineering action
• can clearly explain complex technical concepts to others
• are a fast learner and thrive in ambiguity

What You’ll Do

• Select, deploy and operationalize scanning tooling across our production assets.
• Run vulnerability management end to end: triage, severity in our environment, owner assignment, remediation SLAs and reporting.
• Build engineering-first triage and remediation workflows that fit how our engineering teams already work, and automate the routing and follow-up.
• Build a remediation dashboard that engineering and leadership read and act on.
• Automate collection of the vulnerability management evidence our compliance programs depend on, in partnership with our Compliance team.
• Build automation, including agentic tooling, that removes manual security operations work and keeps pace with engineering growth.

Who You Are

• 5+ years in security engineering, security operations or software engineering, with a significant share of that focused on security.
• Hands-on experience building or running a vulnerability management program or software security tooling (SCA, container, cloud or host scanning).
• An engineering-first approach to triage and remediation: you get findings fixed by making the fix easy to ship.
• The judgment to set a finding's real severity in our environment, using CVSS as one input.
• Strong scripting and automation skills in a language such as Go or Python, and comfort reading infrastructure as code such as Terraform.
• A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed.

Nice to Have

• Experience with real-time media, networking or WebRTC systems.
• Experience supporting compliance audits such as HIPAA, PCI-DSS, ISO 27001 or SOC 2.
• Incident response or application security experience.
• Experience in AI security, such as securing LLM applications or agent infrastructure.

Our Commitment to You

• An opportunity to build something truly impactful to the world
• Contribute to open source alongside world-class engineers
• Competitive salary and equity package
• Health, dental, and vision benefits
• Flexible vacation policy

LiveKit is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact [e-mail].

What the LiveKit application asks

From 6 application forms we checked.

• Tell us about a project you're proud of! asked on 3 of 6 forms
• Tell us about you and why you're excited to apply to this specific role at LiveKit asked on 3 of 6 forms
• Tell us about you and why you're excited to apply to this specific role at LiveKit! asked on 3 of 6 forms
• Contact details: 6 of 6 forms
• Resume or CV: 6 of 6 forms

Application facts

Application form From 6 forms we checked, none asks for a cover letter; about 2 questions only LiveKit asks per form. What it asks

Pay benchmark LiveKit postings that list pay show a $218K median (35 postings)

H-1B LiveKit has H-1B labor condition applications on file with the U.S. Department of Labor (at least 5 filings, fiscal years 2025–2026). An LCA is not a visa approval. H-1B sponsors hiring now