Security Engineer, Vulnerability Management

Canada

Compensation Range: $200K - $300K · Full-time

Applications open in a new tab.

Job details

Pay: Compensation Range: $200K - $300K
Job type: Full-time
Posting language: English
Posted: Nov 6, 2026

Original job description

About LiveKit

LiveKit is building the infrastructure layer for the voice-driven era of computing. Our platform gives developers everything they need to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others, collectively facilitating billions of calls each year.

About This Role

Our customers trust us with audio, video and data belonging to their own end users, so a security failure on our side puts their data and their business at risk. We are hiring a Security Engineer to build and run our vulnerability management and security operations program. Vulnerability management is a core capability for keeping our security posture strong as the platform and the company grow: knowing what we run, finding what is exposed, and getting the right fixes shipped quickly. It also underpins our customer commitments and the compliance programs we are building. Our program is early, and you will shape it. You will join a small Trust team that covers security, IT and compliance, and you will own this program end to end from your first week.

You'll thrive at LiveKit if you

think like both a builder and a breaker, and understand security from first principles
take an automation-first and pragmatic approach to risk mitigation
translate security concerns into engineering action
can clearly explain complex technical concepts to others
are a fast learner and thrive in ambiguity

What You’ll Do

Select, deploy and operationalize scanning tooling across our production assets.
Run vulnerability management end to end: triage, severity in our environment, owner assignment, remediation SLAs and reporting.
Build engineering-first triage and remediation workflows that fit how our engineering teams already work, and automate the routing and follow-up.
Build a remediation dashboard that engineering and leadership read and act on.
Automate collection of the vulnerability management evidence our compliance programs depend on, in partnership with our Compliance team.
Build automation, including agentic tooling, that removes manual security operations work and keeps pace with engineering growth.

Who You Are

5+ years in security engineering, security operations or software engineering, with a significant share of that focused on security.
Hands-on experience building or running a vulnerability management program or software security tooling (SCA, container, cloud or host scanning).
An engineering-first approach to triage and remediation: you get findings fixed by making the fix easy to ship.
The judgment to set a finding's real severity in our environment, using CVSS as one input.
Strong scripting and automation skills in a language such as Go or Python, and comfort reading infrastructure as code such as Terraform.
A pragmatic approach to risk: you can explain why a finding matters to the business and how fast it needs to be fixed.

Nice to Have

Experience with real-time media, networking or WebRTC systems.
Experience supporting compliance audits such as HIPAA, PCI-DSS, ISO 27001 or SOC 2.
Incident response or application security experience.
Experience in AI security, such as securing LLM applications or agent infrastructure.

Our Commitment to You

An opportunity to build something truly impactful to the world
Contribute to open source alongside world-class engineers
Competitive salary and equity package
Health, dental, and vision benefits
Flexible vacation policy

LiveKit is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact recruiting@livekit.io.

Compensation Range: $200K - $300K

Apply About employer

More about this job

Responsibilities

Select, deploy, and operate vulnerability scanning tools across production assets, and manage findings from triage and severity assessment through ownership, remediation deadlines, and reporting. Build automated, engineering-friendly remediation workflows and dashboards, and collect compliance evidence in partnership with the Compliance team.

Requirements

Requires 5+ years in security engineering, security operations, or software engineering, with substantial security experience and hands-on experience running vulnerability management or security tooling. Candidates should bring strong scripting and automation skills, familiarity with infrastructure as code such as Terraform, and sound judgment in prioritizing and communicating risk; experience with real-time media, compliance audits, incident response, application security, or AI security is a plus.

Skills

Vulnerability Management
Security Operations
Security Engineering
Vulnerability Scanning
Risk Assessment
Vulnerability Triage
Remediation Workflows
Security Automation
Python
Go
Terraform
Software Composition Analysis
Container Security
Cloud Security
Host Scanning
Compliance Evidence Collection

Benefits

Equity
Health Benefits
Dental Benefits
Vision Benefits
Flexible Vacation Policy

Visa sponsorship

Not detected in the job text

Keywords

Vulnerability Management
Security Operations
Security Engineering
Production Assets
Vulnerability Scanning
Software Composition Analysis
Container Scanning
Cloud Scanning
Host Scanning
Triage
Severity Assessment
CVSS
Remediation SLAs
Risk Mitigation
Security Automation
Agentic Tooling
Python
Go
Terraform
Compliance Evidence
HIPAA
PCI-DSS
ISO 27001
SOC 2
Incident Response
Application Security
AI Security
LLM Security
WebRTC
Real-Time Media

Report this job