Security Engineer

Deepgram, USA - Remote

The role

Deepgram is looking for a Security Engineer to build and automate the technical controls behind our security program. Most of our infrastructure is bare metal in colocation datacenters — GPU-intensive, running containerized workloads on Docker, managed with Ansible, and shipped through CI/CD on GitHub Actions — with AWS used for overflow capacity and a small set of services. Our engineering culture is high-trust and fast-moving. That means controls have to be delivered as code, be reproducible, and produce their own audit evidence — anything that depends on someone remembering to do it manually will not survive.

You will own real surface area: host hardening and configuration management across the fleet, vulnerability and patch management, penetration testing, container security, detection and response, CI/CD and supply chain security, and the engineering work behind our SOC 2, PCI DSS, and ISO 27001 obligations. You will also be expected to use AI and agentic tooling aggressively to punch above your weight on a small team, and to help us secure the AI systems we build and the AI tools we adopt internally.

All jobs

Security Engineer

Deepgram, USA - Remote

The role

What you will do

Build, deploy, and maintain security controls across our bare-metal fleet and AWS footprint — access management, network segmentation and firewalling, encryption and secrets management, logging and detection coverage, endpoint security, and vulnerability management.
Own configuration management and host hardening as code with Ansible, so baselines are reproducible across hundreds of Linux hosts and drift is detectable rather than merely documented.
Secure containerized workloads: Docker image build pipelines, registry scanning, runtime hardening and detection, and secrets management.
Run vulnerability management end to end – discovery, prioritization by real exploitability rather than raw CVSS, driving remediation with engineering teams, and reporting on it.
Own patch and update management as a program: the server fleet, the endpoint fleet, base images, OS and package updates, firmware where it matters, and dependency upgrades. Set and hold patch SLAs, track exceptions, and automate the routine cases so they do not depend on anyone remembering.
Own the penetration testing lifecycle: scoping and vendor selection, scheduling, triaging findings into engineering work with real owners and dates, verifying fixes on retest, and producing the summary we can share with customers.
Write detections, tune out noise, and take part in incident response. Improve log, telemetry, and security-agent coverage where we are blind.
Run periodic log and access reviews as a standing control, and automate the collection so each cycle produces its own evidence rather than a scramble.
Automate compliance evidence collection for SOC 2, PCI DSS, and ISO 27001, and support audit fieldwork on technical questions — the GRC lead owns the auditor relationship and the narrative; you own the systems that make the evidence true and repeatable.
Harden GitHub Actions CI/CD and the software supply chain: dependency and secret scanning, action pinning, SBOM, artifact and image signing, least-privilege OIDC in place of long-lived credentials.
Apply AI and agentic tooling to security work — triage, evidence gathering, code review, detection engineering — and help secure how the rest of the company uses AI.
Provide the technical input behind customer-facing security work: questionnaire and architecture answers, penetration test summaries, and hardening guidance for customers running Deepgram self-hosted.

Security Engineer

The role

Security Engineer

The role

What you will do

What you need

Nice to have

AI-first by default

About Deepgram

Company overview

About Deepgram

Similar jobs at other companies

Software Engineer - Deepgram for Restaurants

Staff Software Engineer, Platform Security

Senior Software Engineer, Platform Security

Security Operations Engineer

Software Engineer, Platform Security

Senior Software Engineer, Application Security

Deepgram