← All roles

Security Engineer

Deepgram· Engineering
Apply on company site
Remote$150k - $165k + bonusFull-timePosted 2w ago

About the role

Security Engineer role focused on building and automating security controls for Deepgram’s bare-metal and AWS environments, with emphasis on host hardening, vulnerability management, penetration testing, container security, CI/CD security, and audit-driven compliance (SOC 2, PCI DSS, ISO 27001). Hands-on technical position reporting to the Director of Information Security.

Responsibilities

  • Build, deploy, and maintain security controls across our bare-metal fleet and AWS footprint — access management, network segmentation and firewalling, encryption and secrets management, logging and detection coverage, endpoint security, and vulnerability management.
  • Own configuration management and host hardening as code with Ansible, ensuring reproducible baselines across Linux hosts and detectable drift.
  • Secure containerized workloads: Docker image build pipelines, registry scanning, runtime hardening and detection, and secrets management.
  • Run vulnerability management end to end — discovery, prioritization by real exploitability, remediation with engineering teams, and reporting.
  • Own patch and update management program for servers, endpoints, base images, OS and package updates, firmware, and dependencies; set patch SLAs and automate routine cases.
  • Own the penetration testing lifecycle from scoping to retesting, and produce customer-shareable summaries.
  • Write detections, tune noise, participate in incident response; improve log/telemetry/security-agent coverage.
  • Run periodic log and access reviews with automated evidence collection.
  • Automate compliance evidence collection for SOC 2, PCI DSS, and ISO 27001; support audit fieldwork with technical evidence.
  • Harden GitHub Actions CI/CD and software supply chain (scanning, pinning, SBOM, signing, OIDC).
  • Apply AI/agentic tooling to security tasks (triage, evidence gathering, code review, detection engineering).
  • Provide technical input for customer-facing security work (questionnaires, architecture answers, penetration test summaries, hardening guidance).

Qualifications

  • Solid experience in security engineering or infrastructure engineering with a security focus; ownership of controls in production.
  • Deep Linux proficiency: hardening, debugging, managing large Linux fleets (users, sudo, SSH, systemd, kernel updates, host-based agents).
  • Ansible at fleet scale; automate first, document second.
  • Strong scripting: Python and/or Go, plus shell proficiency.
  • Production experience securing Docker containers and build pipelines.
  • Hands-on experience securing GitHub and GitHub Actions (branch protection, CODEOWNERS, workflow permissions, secrets, third-party action risk).
  • Experience running vulnerability and patch management as an ongoing program.
  • Experience managing third-party penetration tests and translating findings into engineering work.
  • Hands-on involvement in at least one formal audit (ISO 27001, PCI DSS, SOC 2).
  • Comfort with AI coding/agentic tools and awareness of associated risks.
  • Pragmatic approach to controls and risk-reduction trade-offs.

Skills

Required:Security engineering / infrastructure securityLinux hardening and administrationAnsibleScripting (Python/Go, shell)Docker and CI/CD securityGitHub Actions securityVulnerability & patch managementPenetration testing managementAudit / compliance experience
Nice to have:AI tooling in security
Last updated Oct 7, 2026. Interested? Apply on the company site.
Deepgram logo

About Deepgram

Building foundational AI for speech transcription and understanding.

Deepgram is a foundational AI company on a mission to understand human language. We give any developer access to the most advanced speech AI transcription and understanding with just an API call. Our models deliver the fastest, most accurate transcription alongside contextual features like summarization, sentiment analysis, and topic detection. Beyond that, developers can: 🔊 Process live-streaming or pre-recorded audio 🌎 Transcribe in dozens of languages ⚙️ Train custom models for unique use cases 🔑 Access deep NLU with a unified API 💻 Build in any programming language with our SDKs ✅ Deploy on-prem or on DG’s managed cloud 📈 Get scalable GPU infra for training and inference Deepgram is a proud NVIDIA partner and Y Combinator company, and we recently completed a $72M Series B to define the future of AI Speech Understanding, making us the most-funded speech AI company at its stage.

ai-enhanced-learningapiartificial-intelligencebrex-fastest-growing-2025liquid-ai-recruiting-targetspeech-to-texttext-to-speechvoice-ai-stack
Company profileWebsite

More open roles at Deepgram