Suggested rewrite: Led a cross-functional initiative that improved [business outcome] by [measurable result], demonstrating experience relevant to this role...
Infrastructure Security Engineer
Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.
- Remote from
- UK, Spain, Netherlands+11 more
- Salary
- Undisclosed
- Department
- Cybersecurity
- Employment
- Full Time
- Experience
- Open level
- Published
- Apply before
- 25 Nov 2026
- Listing views
- 14
- Application actions
- 0
Make your next move.
Prepare your resume, explore your fit, and draft a cover letter for this opportunity.
The role, at a glance.
ElevenLabs is seeking an Infrastructure Security Engineer to build security platforms, guardrails, and tooling for cloud infrastructure and production products. The role combines application security, cloud security, infrastructure engineering, vulnerability remediation, and secure software-delivery practices. Core work includes architecture reviews, threat modeling, secure-by-default patterns, and supply-chain controls such as artifact signing, provenance, admission controls, and SBOMs. Candidates need strong production engineering ability, fluency in a programming language, and hands-on AWS or GCP, Kubernetes, Terraform, IAM, networking, PKI, and Linux knowledge. This is a high-velocity, autonomous role with substantial cross-functional collaboration and a global remote setup.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Pace & Pressure
5/5Autonomy Level
5/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would first map the build-to-production trust boundaries, then require signed artifacts, generate and store SBOMs, and capture provenance during builds. I would enforce verification with admission controls in Kubernetes, restrict image sources to approved registries, and continuously monitor for vulnerable dependencies and policy violations.
I would identify assets, trust boundaries, data flows, identities, entry points, and dependencies, then apply a structured method such as STRIDE to enumerate threats. I would prioritize risks by likelihood and impact, agree on mitigations with engineering, and translate them into concrete design requirements, tests, and operational controls.
I would provide reusable infrastructure modules with least-privilege IAM, encrypted storage and transport, centralized logging, private networking defaults, managed secret handling, and policy-as-code checks. The patterns should be easy for developers to adopt and enforced through CI and deployment workflows rather than relying only on documentation.
I focus on paved roads: automated, self-service controls that are embedded in existing developer workflows. I use risk-based enforcement, provide fast feedback in pull requests and pipelines, measure friction and exceptions, and work with engineering teams to improve controls iteratively.
I would validate scope and exploitability, assess business impact, and coordinate an incident response with infrastructure and service owners. I would prioritize containment and safe remediation, communicate status clearly, verify the fix through monitoring and testing, and conduct a blameless review to implement lasting preventive controls.
About this role.
About ElevenLabs
ElevenLabs is an AI research and product company transforming how we interact with technology.
We launched in January 2023 with the first human-like AI voice model. Today, we serve millions of users and thousands of businesses – from fast-growing startups to large enterprises like Deutsche Telekom and Meta. Our investors are some of the world’s most prominent, including Andreessen Horowitz, ICONIQ Growth and Sequoia. We’ve raised $781M in funding and our last valuation was $22B – multiples of 11, always.
We have expanded from voice into three main platforms:
ElevenAgents enables businesses to deliver seamless and intelligent customer experiences, with the integrations, testing, monitoring, and reliability necessary to deploy voice and chat agents at scale.
ElevenCreative empowers creators and marketers to generate and edit speech, music, image, and video across 70+ languages.
ElevenAPI gives developers access to our leading AI audio foundational models.
Everything we do is the result of the creativity and commitment of our team – builders doing the best work of their lives. We are researchers, engineers, and operators. IOI medalists and ex-founders. If you want to work hard and create lasting positive impact, we want to hear from you.
How we work
High-velocity: Rapid experimentation, lean autonomous teams, and minimal bureaucracy.
Impact not job titles: We don’t have job titles. Instead, it’s about the impact you have. No task is above or beneath you.
AI first: We use AI to move faster with higher-quality results. We do this across the whole company—from engineering to growth to operations.
Excellence everywhere: Everything we do should match the quality of our AI models.
Global team: We prioritize your talent, not your location.
What we offer
Innovative culture: You’ll be part of a generational opportunity to define the trajectory of AI, surrounded by a team pushing the boundaries of what’s possible.
Growth paths: Joining ElevenLabs means joining a dynamic team with countless opportunities to drive impact – beyond your immediate role and responsibilities.
Learning & development: ElevenLabs proactively supports professional development through an annual discretionary stipend.
Social travel: We also provide an annual discretionary stipend to meet up with colleagues each year, however you choose.
Annual company offsite: Each year, we bring the entire team together in a new location – past offsites have included Croatia and Italy.
Co-working: If you’re not located near one of our main hubs, we offer a monthly co-working stipend.
About the role
We’re looking for a Security Engineer to join the ElevenLabs Security team. In this role, you’ll work at the intersection of security, software and infrastructure engineering, building the platforms, controls and tooling that let teams ship and operate cloud infrastructure securely at high velocity.
You will:
Design and build security tools and guardrails that integrate directly into our infrastructure and products
Partner with Engineering and Infrastructure teams to review application architectures, develop threat models and build in secure by default patterns throughout the software development lifecycle
Identify, prioritise and remediate security vulnerabilities, working directly with engineers and contributing to fixes where required, across the entire stack.
Ship new security features which directly improve the security posture of our products in production
Design and implement supply chain security controls across build and deployment pipelines, including artefact signing, provenance, dynamic admission controls and SBOM generation
Requirements
Strong engineering background, with experience building and shipping production systems
Proven track record of building and scaling security programs
Fluency in at least one programming language (Python, Typescript, Golang etc) with the ability to read, write and maintain production quality code
Hands on experience in cloud-native environments (AWS or GCP), Kubernetes, and infrastructure-as-code (Terraform)
Strong understanding of cloud security fundamentals: IAM, networking, PKI, linux internals
Experience securing CI/CD pipelines to prevent supply chain attacks
Bonus:
Experience securing AI or Machine Learning systems, including training pipelines
Background in developer experience or platform engineering, especially building developer tooling
Contributions to open source security projects, published research or talks at security conferences
Experience working in regulated environments (SOC 2, ISO27001, PCI, HIPAA or similar)
Location
This role is remote and can be executed globally. However, to facilitate working with the Security Team, we prefer candidates based in GMT to GMT+3 or UK. If you prefer, you can work from our offices in London or Warsaw
We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses.
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
Apply now.
Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.
Continue on the employer website
Protect your personal information and never pay to secure an interview or job offer. .
