[Hiring] Security Engineer @Deepgram

Role Description

Deepgram is looking for a Security Engineer to build and automate the technical controls behind our security program. Most of our infrastructure is bare metal in colocation datacenters — GPU-intensive, running containerized workloads on Docker, managed with Ansible, and shipped through CI/CD on GitHub Actions — with AWS used for overflow capacity and a small set of services. Our engineering culture is high-trust and fast-moving. That means controls have to be delivered as code, be reproducible, and produce their own audit evidence.

You will own real surface area:

• Host hardening and configuration management across the fleet
• Vulnerability and patch management
• Penetration testing
• Container security
• Detection and response
• CI/CD and supply chain security
• The engineering work behind our SOC 2, PCI DSS, and ISO 27001 obligations

This is the hands-on technical seat. A GRC and Security Compliance Lead owns policy authorship, security questionnaires, and the auditor relationship; you own the controls themselves and the evidence they generate.

This role reports to the Director of Information Security.

Note: as reflected on our published compensation ranges, we are open on level. Strong mid-level and senior candidates are both in scope, and we will calibrate title, scope, and compensation to demonstrated experience.

Responsibilities

• Build, deploy, and maintain security controls across our bare-metal fleet and AWS footprint — access management, network segmentation and firewalling, encryption and secrets management, logging and detection coverage, endpoint security, and vulnerability management.
• Own configuration management and host hardening as code with Ansible.
• Secure containerized workloads: Docker image build pipelines, registry scanning, runtime hardening and detection, and secrets management.
• Run vulnerability management end to end — discovery, prioritization, driving remediation with engineering teams, and reporting.
• Own patch and update management as a program.
• Own the penetration testing lifecycle.
• Write detections, tune out noise, and take part in incident response.
• Run periodic log and access reviews as a standing control.
• Automate compliance evidence collection for SOC 2, PCI DSS, and ISO 27001.
• Harden GitHub Actions CI/CD and the software supply chain.
• Apply AI and agentic tooling to security work.
• Provide the technical input behind customer-facing security work.

Qualifications

• Solid experience in security engineering or infrastructure engineering with a security focus.
• Deep Linux knowledge.
• Ansible at fleet scale is required.
• Strong scripting skills in Python and/or Go, plus real shell competence.
• Production experience securing Docker containers and the pipelines that build them.
• Hands-on experience securing GitHub and GitHub Actions.
• Experience running vulnerability and patch management as an ongoing program.
• Experience managing third-party penetration tests from the inside.
• Hands-on involvement in at least one formal audit — ISO 27001, PCI DSS, or SOC 2.
• Comfortable using AI coding and agentic tools in daily work.
• Pragmatic approach to controls.

Nice to Have

• Datacenter or colocation experience.
• Detection engineering or SIEM/HIDS ownership at scale.
• Secrets management with HashiCorp Vault.
• AWS security and Terraform experience.
• Kubernetes security.
• Offensive security background.
• PCI DSS work inside a cardholder data environment.
• Ownership of a secure SDLC program.
• Experience with GPU infrastructure, ML platforms, or multi-tenant inference workloads.
• Certifications such as OSCP, GIAC, CISSP, or AWS Security Specialty.

Notice

We're aware of individuals impersonating Deepgram recruiters. All legitimate Deepgram recruiting communication comes from an @deepgram.com email address. If you've received a message claiming to be Deepgram, please forward it to [email protected].