Security Engineer: Vulnerability Management & Automation

CyberJob; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health, dental, and vision benefits

Flexible vacation policy

Competitive salary and equity

Job summary

LiveKit is seeking a Security Engineer to build and run vulnerability management and security operations. You will own the program end-to-end from day one, shaping how we detect, triage, and remediate security findings across production assets and compliance efforts.

You will automate scanning, triage, and remediation workflows, build dashboards for leadership, and partner with Compliance to ensure evidence collection. A pragmatic, engineering-first mindset is essential for success.

Qualifications

• 5+ years in security engineering, security operations or software engineering with a strong security focus.
• Hands-on experience building or running vulnerability management or security tooling (SCA, container, cloud or host scanning).
• Engineering-first approach to triage and remediation: make fixes easy to ship.
• Judgment to set findings' real severity using CVSS as an input.
• Strong scripting and automation skills in Go or Python; comfortable with Terraform.
• Pragmatic risk mindset: explain why findings matter to the business and urgency of fixes.

Responsibilities

• Select, deploy and operate scanning tools across production assets.
• Run vulnerability management end-to-end: triage, severity, owner assignment, SLAs and reporting.
• Build engineering-first triage/remediation workflows and automate routing/follow-up.
• Create remediation dashboards for engineering and leadership.
• Automate collection of vulnerability evidence for compliance programs.
• Develop automation and tooling to reduce manual security operations work.

Skills

Security engineering

Automation scripting

Go or Python

Tools

SCA

Container scanning

Cloud scanning

Host scanning

Job description

LiveKit is seeking a Security Engineer to build and run vulnerability management and security operations. You will own the program end-to-end from day one, shaping how we detect, triage, and remediate security findings across production assets and compliance efforts.

You will automate scanning, triage, and remediation workflows, build dashboards for leadership, and partner with Compliance to ensure evidence collection. A pragmatic, engineering-first mindset is essential for success.