LiveKit
More roles at LiveKitSecurity Engineer, Vulnerability Management & Security Operations
Remote work allowed only within certain countries or regions.
Employer listed it 4 days ago · Added 2 days ago
First listed 4 days ago and still open.
Salary
$200k to $300k per year
Location
Timezone
US East
Contract
Full-time
Experience
Mid
Category
Software
Published by the employer
What the advert says
Quoted word for word from the employer's advert. Where it says nothing, we say so.
- Working hours
- Not mentioned in the advert
- Where you can work from
- Location eligibility not confirmed
- Contract
- Not mentioned in the advert
- Experience asked for
- Not mentioned in the advert
- Pay
Competitive salary and equity package
Remote flexibility
Region Restricted
Remote work is allowed, but only for candidates based in United States, Canada.
What the employer says
- Source listing states candidate location: "United States (Remote), Canada (Remote), Remote"
What Nomaders makes of it
- Applications outside the listed area are usually rejected
- Timezone overlap with the listed area is often expected
The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.
Before you apply
Questions worth asking: Nomaders interpretation
- The advert does not say where you can be based. Ask which countries they can legally employ or contract you from.
- The advert does not say whether this is employment or a contractor arrangement. Ask, as it affects tax and benefits.
Produced automatically from this advert's text; not reviewed by a person. The employer's own page is the final word.
About the role
About LiveKit
LiveKit is building the infrastructure layer for the voice-driven era of computing. Our platform gives developers everything they need to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others, collectively facilitating billions of calls each year.
About This Role
Our customers trust us with audio, video and data belonging to their own end users, so a security failure on our side puts their data and their business at risk. We are hiring a Security Engineer to build and run our vulnerability management and security operations program. Vulnerability management is a core capability for keeping our security posture strong as the platform and the company grow: knowing what we run, finding what is exposed, and getting the right fixes shipped quickly. It also underpins our customer commitments and the compliance programs we are building. Our program is early, and you will shape it. You will join a small Trust team that covers security, IT and compliance, and you will own this program end to end from your first week.
You'll thrive at LiveKit if you
think like both a builder and a breaker, and understand security from first principles
take an automation-first and pragmatic approach to risk mitigation
translate security concerns into engineering action
can clearly explain complex technical concepts to others
are a fast learner and thrive in ambiguity
What You’ll Do
Select, deploy and operationalize scanning tooling across our production assets.
Run vulnerability management end to end: triage, severity in our environment, owner assignment, remediation SLAs and reporting.
Build engineering-first triage and remediation workflows that fit how our engineering teams already work, and automate the routing and follow-up.
Build a remediation dashboard that engineering and leadership read and act on.
Automate collection of the vulnerability management evidence our compliance programs depend on, in partnership with our Compliance team.
Build automation, including agentic tooling, that removes manual security operations work and keeps pace with engineering growth.
Who You Are
5+ years in security engineering, security operations or software engineering, with a significant share of that focused on security.
Hands-on experience building or running a vulnerability management program or software security tooling (SCA, container, cloud or host scanning).
An engineering-first approach to triage and remediation: you get findings fixed by making the fix easy to ship.
The judgment to set a finding's real severity in our environment, using CVSS as one input.
Strong scripting and automation skills in a language such as Go or Python, and comfort reading infrastructure as code such as Terraform.
A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed.
Requirements
The employer hasn't listed requirements separately, they're described in the role summary above and on the original listing.
Benefits
- ·Flexible vacation policy
How to apply
- 1Check the flexibility label above, region restricted, matches where you plan to live and work.
- 2Tailor your CV to the role at LiveKit, mentioning your remote working experience and working hours (US East).
- 3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.
Found 3d ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.
Listing sourced from Company boards.
Similar roles
Other open software roles with comparable remote rules.
$200k to $300k per year · You'll be taken to the employer's careers page.