Staff Security Engineer

Role Overview

As a Staff Security Engineer at LiveKit, you’ll be a hands-on engineer who secures systems by writing code, investigating vulnerabilities, and hardening the platform end-to-end. This role is focused on proactive security engineering across the full stack—not just audits, policies, or scans.

What You’ll Do

• Own security across the stack: applications, services, infrastructure, and developer workflows
• Identify, assess, and mitigate risks in infrastructure and application codebases
• Lead secure code reviews, architecture discussions, and threat modeling sessions
• Build security tooling and automations to prevent issues before they reach production
• Harden authentication and access control across internal and external surfaces
• Partner with engineers to design secure-by-default APIs, workflows, and deployments
• Investigate vulnerabilities, respond to security incidents, and manage disclosure processes

What You Bring

• 6+ years as a software engineer with strong interest in security engineering
• Experience leading or heavily contributing to security engineering across applications and/or infrastructure
• Threat modeling, secure coding practices, and vulnerability management experience
• Worked with CI/CD, cloud platforms (AWS, GCP, etc.), and containerized environments
• Responded to real security incidents, led postmortems, and drove remediation

Nice to Have

• Security reviews of WebRTC, media pipelines, or real-time systems
• Contributions to open-source security tooling or research
• Hands-on experience with static/dynamic analysis, fuzzing, or sandboxing
• Built (or tried to build) something with LiveKit

Compensation & Benefits

• $200K–$300K compensation range (includes salary and equity per posting)
• Health, dental, and vision benefits; flexible vacation policy; competitive salary and equity