--- title: 'Security Engineer, Vulnerability Management & Security Operations at LiveKit' canonical: 'https://feeny.ai/job/security-engineer-vulnerability-management-security-operations-livekit-united-4vj9pgq5krve' type: 'job' last_seen: '2026-10-25' --- # Security Engineer, Vulnerability Management & Security Operations at LiveKit - **Company:** LiveKit - **Location:** United States - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-22 - **Last confirmed live:** 2026-10-25 - **Apply:** https://jobs.ashbyhq.com/livekit/f0c49b41-8390-4c8e-8f52-478bb043dbfe ## Job description ## About LiveKit LiveKit is building the infrastructure layer for the voice-driven era of computing. Our platform gives developers everything they need to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others, collectively facilitating billions of calls each year. ## About This Role Our customers trust us with audio, video and data belonging to their own end users, so a security failure on our side puts their data and their business at risk. We are hiring a Security Engineer to build and run our vulnerability management and security operations program. Vulnerability management is a core capability for keeping our security posture strong as the platform and the company grow: knowing what we run, finding what is exposed, and getting the right fixes shipped quickly. It also underpins our customer commitments and the compliance programs we are building. Our program is early, and you will shape it. You will join a small Trust team that covers security, IT and compliance, and you will own this program end to end from your first week. You'll thrive at LiveKit if you - think like both a builder and a breaker, and understand security from first principles - take an automation-first and pragmatic approach to risk mitigation - translate security concerns into engineering action - can clearly explain complex technical concepts to others - are a fast learner and thrive in ambiguity ## What You’ll Do - Select, deploy and operationalize scanning tooling across our production assets. - Run vulnerability management end to end: triage, severity in our environment, owner assignment, remediation SLAs and reporting. - Build engineering-first triage and remediation workflows that fit how our engineering teams already work, and automate the routing and follow-up. - Build a remediation dashboard that engineering and leadership read and act on. - Automate collection of the vulnerability management evidence our compliance programs depend on, in partnership with our Compliance team. - Build automation, including agentic tooling, that removes manual security operations work and keeps pace with engineering growth. ## Who You Are - 5+ years in security engineering, security operations or software engineering, with a significant share of that focused on security. - Hands-on experience building or running a vulnerability management program or software security tooling (SCA, container, cloud or host scanning). - An engineering-first approach to triage and remediation: you get findings fixed by making the fix easy to ship. - The judgment to set a finding's real severity in our environment, using CVSS as one input. - Strong scripting and automation skills in a language such as Go or Python, and comfort reading infrastructure as code such as Terraform. - A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed. ## Nice to Have - Experience with real-time media, networking or WebRTC systems. - Experience supporting compliance audits such as HIPAA, PCI-DSS, ISO 27001 or SOC 2. - Incident response or application security experience. - Experience in AI security, such as securing LLM applications or agent infrastructure. Our Commitment to You - An opportunity to build something truly impactful to the world - Contribute to open source alongside world-class engineers - Competitive salary and equity package - Health, dental, and vision benefits - Flexible vacation policy LiveKit is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact recruiting@livekit.io. ## About LiveKit ## Company Overview - **One-liner**: LiveKit provides an open-source framework and cloud platform for building, deploying, and scaling voice, video, and physical AI agents. - **Entity Type**: Private (Series C) - **Headquarters**: San Jose, California, United States - **Founded**: 2021 - **Founders**: David Zhao (Co-Founder and CTO) ## Core Business - **Primary industry/industries**: Developer Infrastructure, Real-Time Communications (RTC), Voice AI, Video AI, Robotics - **Target customers**: B2B; Developers, AI labs, robotics teams, and enterprises (including Fortune 500 companies) building real-time multimodal AI applications. - **Mission or purpose statement**: To build the infrastructure for the voice-driven era of computing, making it possible for every developer to build AI that can interact with the world in real time. ## Products & Services - **LiveKit Cloud**: A hosted, managed platform for deploying and scaling AI agents globally. It provides a global real-time media server network with sub-1000ms latency and 99.99% uptime, handling millions of concurrent calls. Includes telephony integration (phone numbers, SIP), full-stack observability, and an inference gateway for TTS, LLM, and STT models. - **LiveKit Agents Framework**: An open-source, high-level framework (Python/Node.js) for building AI agents. It includes tools for automatic turn detection, interruption handling, voice activity detection (VAD), and a plugin system for connecting to various AI providers. - **LiveKit Server (Open Source)**: The core open-source WebRTC Selective Forwarding Unit (SFU) that orchestrates real-time communication. Can be self-hosted or used with LiveKit Cloud. - **Integration Services**: Telephony (PSTN/SIP connectivity), Egress (recording and streaming), and Ingress (external media streams). - **Client SDKs**: Real-time SDKs for Web, Swift, Android, Flutter, React Native, Unity, Python, Node.js, Rust, C++, and ESP32. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed. Total funding is $181M. - **Key Metric**: Total Funding of $181M. Over 2.5 billion calls powered annually. Over 300,000 developers use the platform. - **Notable Investors/Partners**: Index Ventures (led Series C), Altimeter Capital (led Series A), Redpoint (led Seed). Angel investors include Elad Gil, Jeff Dean (Chief Scientist, Google), Aravind Srinivas (CEO, Perplexity), Guillermo Rauch (CEO, Vercel), Amjad Masad (CEO, Replit), Mati Staniszewski (CEO, ElevenLabs), Erik Bernhardsson (CEO, Modal), Logan Kilpatrick (Product Lead, Google DeepMind), Rohan Anil (Researcher, Anthropic), Garrett Camp (Founder, Uber), Ev Williams (Founder, Twitter), and Justin Kan (Founder, Twitch). Key customer: OpenAI (built ChatGPT’s Advanced Voice on LiveKit Cloud). - **Growth Signals**: Rapid headcount growth (+7.1% monthly). Raised a $100M Series C in January 2026. Expanded from a WebRTC livestreaming project to the default infrastructure layer for voice AI. Operates in 12 countries. SOC 2 Type 2 and HIPAA compliant. ## Competitive Advantages - **Open-Source Foundation**: A large and active open-source community (over 300,000 developers) creates a strong ecosystem and lowers the barrier to entry. - **Full-Stack Platform**: Provides everything from the media server and client SDKs to the agent framework, inference gateway, and telephony integration, offering a unified, end-to-end solution. - **Proven at Scale**: Powers billions of calls annually for the world’s leading AI companies, including OpenAI’s Advanced Voice Mode, demonstrating extreme reliability and performance. - **Global Infrastructure**: A global network of media servers ensures low latency (<1000ms) and high uptime (99.99%) for real-time voice and video applications. - **Enterprise-Grade Compliance**: SOC 2 Type 2, HIPAA, and GDPR compliant, making it suitable for regulated industries. ## Strategic Focus - **Voice-First AI Infrastructure**: Doubling down on being the default platform for the emerging voice-driven computing paradigm. - **Expanding the Agent Ecosystem**: Continuously improving the Agents framework, adding new plugins, and supporting more AI models and hardware (including robotics). - **Scaling the Cloud Platform**: Investing in global infrastructure to handle increasing demand and maintain performance as usage grows. - **Enterprise Adoption**: Targeting Fortune 500 companies and regulated industries by emphasizing compliance, security, and reliability. ## Why Work Here - **High-Impact Work**: Build the core infrastructure powering the next generation of AI applications used by millions. Employees work on challenging problems in distributed systems, real-time media, and AI. - **Strong Engineering Culture**: A technical team with a high density of senior engineers. The tech stack is modern and includes Go, Rust, Python, TypeScript, WebRTC, Kubernetes, and various AI/ML tools. - **Remote-First with Hubs**: The company is remote-first but has a hybrid hub in San Francisco. Employees are distributed across 12 countries including the US, Canada, Germany, UK, and India. - **Top-Tier Investors & Advisors**: Backed by the best investors and advised by leaders from Google, OpenAI, and other top AI companies, providing a strong network and strategic direction. - **Growth Trajectory**: The company is in a high-growth phase (recent $100M Series C, rapid hiring), offering significant career growth opportunities. - **Culture**: Described as having a 5.0/5.0 employer rating on LinkedIn, with high marks for work-life balance, compensation, and career development. The company values "crazy ones" who want to build the future. ## Sources 1. [livekit.com](https://livekit.com/) 2. [livekit.com/about](https://livekit.com/about) 3. [livekit.com/careers](https://livekit.com/careers) 4. [linkedin.com/company/livekitco](https://www.linkedin.com/company/livekitco) 5. [docs.livekit.io](https://docs.livekit.io/intro/about/) ## Other roles at LiveKit - [Solutions Architect](https://feeny.ai/job/solutions-architect-livekit-united-kingdom-den2ra0ywgvs) — United Kingdom - [Senior Payroll Specialist](https://feeny.ai/job/senior-payroll-specialist-livekit-united-states-4ze7hbn5k9xc) — United States - [Security Engineer, Infrastructure Security](https://feeny.ai/job/security-engineer-infrastructure-security-livekit-united-states-2rj1ph39vhzs) — United States - [Revenue Accounting Manager](https://feeny.ai/job/revenue-accounting-manager-livekit-united-states-djpk4qejrg3j) — United States - [Senior Product Operations Manager](https://feeny.ai/job/senior-product-operations-manager-livekit-united-states-ktq4pb5mq8rv) — United States - [Backend Engineer, Real-Time Media](https://feeny.ai/job/backend-engineer-real-time-media-livekit-north-fqfh5jmcszr2) — North, United States - [Design Engineer, Web/Brand](https://feeny.ai/job/design-engineer-web-brand-livekit-united-states-yx2txp9pkd8q) — United States - [Senior Brand Designer](https://feeny.ai/job/senior-brand-designer-livekit-austin-4bv7cenk1e8v) — Austin, TX - [GTM Strategic Finance Manager](https://feeny.ai/job/gtm-strategic-finance-manager-livekit-united-states-rb0ccpmpan16) — United States - [Senior Developer Advocate, Social](https://feeny.ai/job/senior-developer-advocate-social-livekit-united-states-r3sdwt54j53e) — United States