At a glance
- Employment
- Full-time
- Workplace
- Remote
- Location
- Remote
About Deepgram
- Deepgram builds foundational voice AI — speech-to-text, text-to-speech, and voice agent infrastructure — used by enterprises and developers to build production voice applications at scale. Our models are trained and served on our own infrastructure, and we offer hosted, dedicated single-tenant, and self-hosted deployment options so customers can meet their own data residency and retention requirements. Learn more at deepgram.com http://deepgram.com.
About the role
- Deepgram is looking for a Security Engineer to build and automate the technical controls behind our security program.
- You will own real surface area including host hardening, vulnerability management, penetration testing, container security, detection and response, CI/CD and supply chain security, and compliance obligations.
- This is a hands-on technical seat where you will use AI and agentic tooling aggressively to punch above your weight on a small team.
Responsibilities
- Build, deploy, and maintain security controls across our bare-metal fleet and AWS footprint.
- Own configuration management and host hardening as code with Ansible.
- Secure containerized workloads including Docker image build pipelines, registry scanning, runtime hardening and detection, and secrets management.
- Run vulnerability management end to end from discovery and prioritization to driving remediation.
- Own patch and update management as a program for the server and endpoint fleets, base images, OS/package updates, and dependencies.
- Own the penetration testing lifecycle from scoping and vendor selection to triaging findings and verifying fixes.
- Write detections, tune out noise, and take part in incident response.
- Automate compliance evidence collection for SOC 2, PCI DSS, and ISO 27001, and support audit fieldwork.
- Harden GitHub Actions CI/CD and the software supply chain.
- Apply AI and agentic tooling to security work and help secure how the rest of the company uses AI.
Requirements
- Solid experience in security engineering or infrastructure engineering with a security focus.
- Deep Linux knowledge including hardening, debugging, and reasoning about a large fleet of physical Linux hosts.
- Ansible at fleet scale.
- Strong scripting in Python and/or Go, plus real shell competence.
- Production experience securing Docker containers and the pipelines that build them.
- Hands-on experience securing GitHub and GitHub Actions.
- Experience running vulnerability and patch management as an ongoing program.
- Experience managing third-party penetration tests from the inside.
- Hands-on involvement in at least one formal audit (ISO 27001, PCI DSS, or SOC 2) as the engineer producing and defending evidence.
- Comfortable using AI coding and agentic tools in daily work.
Preferred qualifications
- Datacenter or colocation experience.
- Detection engineering or SIEM/HIDS ownership at scale.
- Secrets management with HashiCorp Vault.
- AWS security and Terraform.
- Kubernetes security.
- Offensive security background.
- PCI DSS work inside a cardholder data environment.
- Ownership of a secure SDLC program.
Skills
- Ansible
- Python
- Go
- Docker
- GitHub Actions
- AWS
- Terraform
- HashiCorp Vault
- Kubernetes
- Wazuh
- OSSEC
- Elastic
