Senior Security Engineer

The role

You will build and automate technical security controls across bare-metal and AWS infrastructure. This hands-on role involves host hardening, vulnerability management, container security, and supporting compliance obligations through automated evidence collection.

What you will do

• Build, deploy, and maintain security controls across bare-metal fleet and AWS footprint
• Own configuration management and host hardening as code with Ansible
• Secure containerized workloads including Docker image build pipelines and runtime hardening
• Run end to end vulnerability management and driving remediation with engineering teams
• Own patch and update management for server fleet, endpoint fleet, and base images
• Own the penetration testing lifecycle including scoping, triaging, and verifying fixes
• Write detections, tune out noise, and take part in incident response
• Run periodic log and access reviews and automate evidence collection
• Automate compliance evidence collection for SOC 2, PCI DSS, and ISO 27001
• Harden GitHub Actions CI/CD and the software supply chain

Required qualifications

• Solid experience in security engineering or infrastructure engineering with a security focus
• Deep Linux experience including hardening, debugging, and reasoning about large fleets of physical hosts
• Ansible at fleet scale
• Strong scripting in Python and/or Go, plus real shell competence
• Production experience securing Docker containers and the pipelines that build them
• Hands-on experience securing GitHub and GitHub Actions
• Experience running vulnerability and patch management as an ongoing program
• Experience managing third-party penetration tests from the inside
• Hands-on involvement in at least one formal audit such as ISO 27001, PCI DSS, or SOC 2
• Comfortable using AI coding and agentic tools in daily work

Nice to have

• Datacenter or colocation experience
• Detection engineering or SIEM/HIDS ownership at scale
• Secrets management with HashiCorp Vault
• AWS security and Terraform
• Kubernetes security
• Offensive security background
• PCI DSS work inside a cardholder data environment
• Ownership of a secure SDLC program
• Experience with GPU infrastructure, ML platforms, or multi-tenant inference workloads
• Certifications such as OSCP, GIAC, CISSP, or AWS Security Specialty

About the company

Deepgram builds foundational voice AI used by enterprises and developers to build production voice applications at scale. Their models are trained and served on their own infrastructure.