Security Engineer, Vulnerability Management

United States (Remote). Posted 8 days ago

The role

You will build and run the vulnerability management and security operations program. This includes selecting scanning tools, managing remediation workflows, and building automation to support compliance and engineering growth.

What you will do

Select, deploy and operationalize scanning tooling across production assets.
Run vulnerability management end to end including triage, severity, owner assignment, remediation SLAs and reporting.
Build engineering-first triage and remediation workflows.
Automate the routing and follow-up of findings.
Build a remediation dashboard for engineering and leadership.
Automate collection of vulnerability management evidence for compliance programs.
Build automation and agentic tooling to remove manual security operations work.

Required qualifications

5+ years in security engineering, security operations or software engineering, with a significant share focused on security.
Hands-on experience building or running a vulnerability management program or software security tooling (SCA, container, cloud or host scanning).
An engineering-first approach to triage and remediation.
The judgment to set a finding's real severity in our environment, using CVSS as one input.
Strong scripting and automation skills in a language such as Go or Python.
Comfort reading infrastructure as code such as Terraform.
A pragmatic approach to risk.

Nice to have

Experience with real-time media, networking or WebRTC systems.
Experience supporting compliance audits such as HIPAA, PCI-DSS, ISO 27001 or SOC 2.
Incident response or application security experience.
Experience in AI security, such as securing LLM applications or agent infrastructure.

Benefits

Opportunity to build something impactful
Contribute to open source alongside world-class engineers
Competitive salary and equity package
Health, dental, and vision benefits
Flexible vacation policy

About the company

LiveKit is building the infrastructure layer for the voice-driven era of computing. Their platform powers voice AI applications for companies like OpenAI, xAI, Salesforce, Coursera, and Spotify.