Security Engineer: Vulnerability Management & Automation

Royper Royco LLC; United States; Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Open source contribution

Competitive salary & equity

Health, dental, and vision benefits

Flexible vacation

Job summary

LiveKit seeks a Security Engineer to own vulnerability management and security operations, shaping an end-to-end program for assets across the platform. You will drive tooling, triage, remediation, and reporting in collaboration with Engineering and Compliance.

You’ll need 5+ years in security roles, strong automation skills (Go/Python) and Terraform, and a pragmatic view of risk to balance security with product velocity. This is a US-based opportunity.

Qualifications

• 5+ years in security engineering or security operations.
• Hands-on experience building or running vulnerability management programs or security tooling (SCA, container, cloud or host scanning).
• Engineering-first triage and remediation: fix should be easy to ship.
• Ability to set findings' severity using CVSS as an input.
• Strong scripting in Go or Python and familiarity with IaC (Terraform).
• Pragmatic risk reasoning, able to explain business impact and urgency.

Responsibilities

• Select, deploy and operationalize scanning tooling across production assets.
• Run vulnerability management end to end: triage, severity, owner assignment, remediation SLAs and reporting.
• Build engineering-first triage and remediation workflows and automate routing and follow-up.
• Build a remediation dashboard for engineering and leadership to read and act on.
• Automate collection of vulnerability management evidence with Compliance.
• Build automation including agentic tooling to remove manual security operations work.

Skills

Security engineering

Vulnerability management

Go/Python scripting

Terraform

Security tooling

Tools

SCA

Container scanning

Cloud scanning

Host scanning

Terraform

Job description

LiveKit seeks a Security Engineer to own vulnerability management and security operations, shaping an end-to-end program for assets across the platform. You will drive tooling, triage, remediation, and reporting in collaboration with Engineering and Compliance.

You’ll need 5+ years in security roles, strong automation skills (Go/Python) and Terraform, and a pragmatic view of risk to balance security with product velocity. This is a US-based opportunity.