Security Engineer, Infrastructure Security

Infrastructure Security Enginee

About LiveKit: Pioneering the Voice AI Revolution
At LiveKit, we're not just building a platform; we're crafting the foundational infrastructure for the next generation of computing – the voice-driven era. Our robust platform empowers developers with everything needed to build, test, deploy, scale, and observe cutting-edge voice AI agents in production. Since our founding in 2021, LiveKit has become the trusted backbone for voice AI applications at industry giants like OpenAI, xAI, Salesforce, Coursera, and Spotify, facilitating billions of calls annually. Join us and secure the future of interactive AI.

The Mission: Secure the Voice of AI
Our platform processes sensitive audio, video, and data for millions of end-users. A single security vulnerability could jeopardize not only our customers' data but their entire business. As an **Infrastructure Security Engineer**, you will be at the forefront of protecting this critical production platform. Joining our nimble Trust team (covering security, IT, and compliance), you will immediately own pivotal parts of our security program. You'll move beyond reactive fixes, proactively defining our infrastructure security posture, prioritizing remediation based on business impact, and architecting scalable guardrails and security building blocks. This role is for a strategic builder who thinks like a breaker, driven by impact and an automation-first mindset.

You'll excel at LiveKit if you:

Think like both a builder and a breaker, approaching security from first principles.
Champion an automation-first, pragmatic approach to risk mitigation.
Articulate complex security concerns, translating them into clear, actionable engineering initiatives.
Possess the ability to explain intricate technical concepts with clarity.
Are a rapid learner and flourish in dynamic, ambiguous environments.

Your Impact: What You'll Be Building & Securing
As a core member of our Trust team, you'll tackle high-impact challenges and own critical initiatives, including:

**Architect & Baseline:** Comprehensively map and document the security posture of our cloud and production infrastructure, establishing a robust baseline.
**Identify & Remediate:** Proactively identify vulnerabilities that could lead to customer data loss or infrastructure compromise, collaborate with engineering to prioritize the security debt backlog, and drive remediation of the highest-risk items.
**Harden Core Infrastructure:** Strengthen identity, secrets management, and network boundaries, encompassing cloud IAM, environment isolation, and meticulous credential hygiene.
**Secure AI Agents:** Fortify the infrastructure hosting customer-deployed voice AI agents, focusing on tenant isolation, secure secrets management for third-party model providers, and robust media/recording storage.
**Automate Security-by-Design:** Embed guardrails and secure defaults into our infrastructure as code (IaC), making the secure path the default and easiest option for engineers.
**Compliance Automation:** Partner with our Compliance team to align infrastructure controls with PCI-DSS and ISO 27001 requirements, automating the generation of technical evidence essential for audits.

What You'll Bring to LiveKit
You're a seasoned security professional with a passion for building secure, scalable systems:

**Experience:** 5+ years in security engineering, infrastructure engineering, or SRE, with a significant emphasis on infrastructure security.
**Cloud & Containers Expertise:** Hands-on experience securing a major cloud provider (AWS, GCP, or Azure) and containerized workloads, including Kubernetes.
**Proven Ownership:** A demonstrated track record of owning end-to-end infrastructure security for a production platform.
**Automation & IaC Fluency:** Proficient with infrastructure as code tools like Terraform, coupled with strong scripting and automation skills in languages such as Go or Python.
**Pragmatic Risk Management:** A pragmatic approach to risk, capable of clearly articulating the business impact of security findings and the urgency of their remediation.

Bonus Points If You Have

Experience with real-time media, networking, or WebRTC systems.
Direct experience in AI security, such as securing LLM applications or agent infrastructure.
Incident response or application security experience.
Familiarity with supporting compliance audits (e.g., PCI-DSS, ISO 27001, SOC 2, HIPAA).

Why Join the LiveKit Team?

Be part of a team building truly impactful technology that shapes the future of computing.
Contribute to open source alongside world-class engineers, influencing the broader tech community.
Competitive salary and equity package, ensuring you share in our success.
Comprehensive health, dental, and vision benefits.
Flexible vacation policy that respects your work-life balance.

Ready to make your mark on the voice-driven future? Apply today!

LiveKit is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact [email protected].