Security Engineer, Vulnerability Management & Security Operations
关于 LiveKit,我们正在为计算机的语音驱动时代构建基础设施层。我们的平台为开发人员提供了他们在生产中建立，测试，部署，扩展和观察代理所需的一切东西。在2021年成立后，LiveKit 为 OpenAI,xAI,Salesforce,Coursera,Spotify 和其他数千个应用程序提供了语音人工智能功能，每年共同促进数十亿次电话。关于这个角色，我们的客户信任我们与属于自己的最终用户的声音，视频和数据，因此我们方面的一项安全故障将他们的数据和业务置于危险之中。我们聘请一个安全工程师来构建并运行我们的漏洞管理和操作安全计划。脆弱性管理是保持我们安全态度强的核心能力，随着平台和公司的发展：了解我们运行什么，找到暴露的内容，并快速发送正确的修复。它也支持我们的客户承诺以及我们正在构建的合规计划。我们的程序很早，你会塑造它。你将加入一个小型的信任团队，该团队涵盖安全，IT 和合规性，你将拥有这个程序从第一周到最后。如果你像构建者和破坏者一样，并且理解安全从一开始就会采取自动化首先和务实的方法来缓解风险转换安全问题成工程行动可以清楚地解释复杂的技术概念给其他人是快速学习者并在模糊中繁荣。构建工程师优先级和修复工作流程，以适应我们的工程团队已经的工作方式，并自动化路由和后续。构建一个修复仪表板，该仪表板的工程师和领导者阅读和采取行动。自动收集漏洞管理证据 我们的合规程序与我们的合规团队合作依赖于。构建自动化，包括代理工具，消除手工安全运营工作，保持与工程增长步伐。你是谁5+年在安全工程，操作安全分享或软件工程，具有显著的重点 实践经验构建或运行漏洞管理程序或软件安全工具 （SCA,容器，云或主机扫描）.
查看英文原文
About LiveKitLiveKit is building the infrastructure layer for the voice-driven era of computing. Our platform gives developers everything they need to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others, collectively facilitating billions of calls each year.About This RoleOur customers trust us with audio, video and data belonging to their own end users, so a security failure on our side puts their data and their business at risk. We are hiring a Security Engineer to build and run our vulnerability management and security operations program. Vulnerability management is a core capability for keeping our security posture strong as the platform and the company grow: knowing what we run, finding what is exposed, and getting the right fixes shipped quickly. It also underpins our customer commitments and the compliance programs we are building. Our program is early, and you will shape it. You will join a small Trust team that covers security, IT and compliance, and you will own this program end to end from your first week.You'll thrive at LiveKit if youthink like both a builder and a breaker, and understand security from first principlestake an automation-first and pragmatic approach to risk mitigationtranslate security concerns into engineering actioncan clearly explain complex technical concepts to othersare a fast learner and thrive in ambiguity What You’ll DoSelect, deploy and operationalize scanning tooling across our production assets.Run vulnerability management end to end: triage, severity in our environment, owner assignment, remediation SLAs and reporting.Build engineering-first triage and remediation workflows that fit how our engineering teams already work, and automate the routing and follow-up.Build a remediation dashboard that engineering and leadership read and act on.Automate collection of the vulnerability management evidence our compliance programs depend on, in partnership with our Compliance team.Build automation, including agentic tooling, that removes manual security operations work and keeps pace with engineering growth.Who You Are5+ years in security engineering, security operations or software engineering, with a significant share of that focused on security.Hands-on experience building or running a vulnerability management program or software security tooling (SCA, container, cloud or host scanning).An engineering-first approach to triage and remediation: you get findings fixed by making the fix easy to ship.The judgment to set a finding's real severity in our environment, using CVSS as one input.Strong scripting and automation skills in a language such as Go or Python, and comfort reading infrastructure as code such as Terraform.A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed.Nice to HaveExperience with real-time media, networking or WebRTC systems.Experience supporting compliance audits such as HIPAA, PCI-DSS, ISO 27001 or SOC 2.Incident response or application security experience.Experience in AI security, such as securing LLM applications or agent infrastructure.Our Commitment to YouAn opportunity to build something truly impactful to the worldContribute to open source alongside world-class engineersCompetitive salary and equity packageHealth, dental, and vision benefitsFlexible vacation policyLiveKit is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact recruiting@livekit.io.