Select, deploy, and operationalize vulnerability scanning tools across production assets.
Run vulnerability management end to end, including triage, severity assessment, ownership, remediation SLAs, and reporting.
Build engineering-focused triage and remediation workflows and automate routing and follow-up.
Create a remediation dashboard for engineering and leadership.
Automate collection of vulnerability management evidence for compliance programs.
Build automation and agentic tooling to reduce manual security operations work.
Requirements
5+ years of experience in security engineering, security operations, or software engineering, with a significant portion focused on security.
Hands-on experience building or operating a vulnerability management program or security software tooling, including SCA, container, cloud, or host scanning.
Engineering-first approach to triage and remediation, with the ability to make fixes easy to ship.
Ability to determine the real severity of findings in context, using CVSS as an input.
Strong scripting and automation skills in Go or Python and familiarity with infrastructure as code such as Terraform.
Ability to explain security risks in business terms and determine appropriate remediation urgency.
Preferred experience with real-time media, networking, or WebRTC systems.
Preferred experience supporting HIPAA, PCI-DSS, ISO 27001, or SOC 2 compliance audits.
Preferred incident response, application security, or AI security experience, including securing LLM applications or agent infrastructure.
Benefits
Opportunity to build an impactful security program.
Contribute to open source alongside experienced engineers.
Competitive salary and equity package.
Health, dental, and vision benefits.
Flexible vacation policy.
Salary: $200k - $300k/yr
LiveKit
LiveKit offers open source frameworks and a cloud platform for building voice, video, and physical AI agents.