[All remote jobs](https://jobicy.com/jobs.md)[![Deepgram logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/12/WRILS-201212160008-406229.jpg)](https://jobicy.com/company/deepgram.md)[Deepgram](https://jobicy.com/company/deepgram.md) # Security Engineer AI Summary Deepgram is seeking a hands-on Security Engineer to automate and operate technical security controls across a bare-metal Linux fleet, containerized workloads, CI/CD pipelines, and a supporting AWS footprint. The role owns host hardening, Ansible-based configuration management, vulnerability and patch management, container security, detection engineering, incident response, and penetration-test remediation. It also supports SOC 2, PCI DSS, and ISO 27001 by building repeatable controls and automated audit evidence rather than writing compliance policy. The position requires strong Linux, Docker, GitHub Actions, scripting, and security automation experience, along with practical use of AI tooling. It is a high-autonomy technical role reporting to the Director of Information Security.[Apply for this job](#job-application)[View company](https://jobicy.com/company/deepgram.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 165k–245k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished11 Nov 2026Apply before11 Dec 2026Listing views38Application actions2Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. ### Company Overview [Deepgram](https://jobicy.com/company/deepgram.md) is bringing the world’s most natural interface, voice, to the technology we use every day. Our speech models and real-time infrastructure power AI systems that keep up with the way people actually speak. More than 5,000 organizations run conversational voice AI on Deepgram in production, including Twilio, Cloudflare, Sierra, Decagon, Vapi, Cresta, Granola, and Jack in the Box. The Deepgram Voice Agent Platform brings together speech-to-text, text-to-speech and speech-to-speech, with voice-native foundation models available through cloud APIs or self-hosted and on-premises deployments. Built for accuracy, low latency and cost efficiency, Deepgram makes high-quality voice experiences practical to build and run at scale. More than 650,000 developers have used Deepgram to process more than 200,000 years of audio. Every day, more of the world’s conversations with AI run on our models. Operating Principles: Deepgram is a research company that productizes as fast as possible. Four Operating Principles shape how we think, decide, and work together: * Compress before you communicate. You think it through first, then lead with the bottom line. * Resist entropy. You question what already exists before adding more process or tools. * Solve the category. You fix recurring problems at the source, not one case at a time. * Work at the frontier. You go after problems no one has solved yet. We look for people who already work this way, and these principles shape how we grow and evaluate our team. ### AI-First by Default We build AI that millions of people talk to, and we run the company the same way. AI is how we centralize work here, and is core to how we operate. That means more than using the tools. We expect you to: * Build, not just use. Design your own workflows and agents, and use AI to remove whole categories of work instead of doing the same work faster. * Own the output. AI can speed up the work. It doesn’t make anyone less accountable for it. You understand, verify, and stand behind everything you share, including what an agent produces for you. * Spend the time you get back at the frontier. The capacity AI creates goes toward problems no one has solved yet. * Keep pace. Models and tools change every month, and so will your work. You adopt what’s new quickly and drop what no longer earns its place. We judge AI by what it helps you deliver and whether you stand behind the result, not by how often you use it. In interviews, expect to walk us through a workflow you built and where you drew the line between AI and your own judgment. ### The Opportunity Deepgram is looking for a Security Engineer to build and automate the technical controls behind our security program. Most of our infrastructure is bare metal in colocation datacenters — GPU-intensive, running containerized workloads on Docker, managed with Ansible, and shipped through CI/CD on GitHub Actions — with AWS used for overflow capacity and a small set of services. Our engineering culture is high-trust and fast-moving. That means controls have to be delivered as code, be reproducible, and produce their own audit evidence — anything that depends on someone remembering to do it manually will not survive. You will own real surface area: host hardening and configuration management across the fleet, vulnerability and patch management, penetration testing, container security, detection and response, CI/CD and supply chain security, and the engineering work behind our SOC 2, PCI DSS, and ISO 27001 obligations. You will also be expected to use AI and agentic tooling aggressively to punch above your weight on a small team, and to help us secure the AI systems we build and the AI tools we adopt internally. This is the hands-on technical seat. A GRC and Security Compliance Lead owns policy authorship, security questionnaires, and the auditor relationship; you own the controls themselves and the evidence they generate, and you give that role the technical answers it needs. This role reports to the Director of Information Security. Note: as reflected on our published compensation ranges, we are open on level. Strong mid-level and senior candidates are both in scope, and we will calibrate title, scope, and compensation to demonstrated experience. ### About Deepgram Deepgram builds foundational voice AI — speech-to-text, text-to-speech, and voice agent infrastructure — used by enterprises and developers to build production voice applications at scale. Our models are trained and served on our own infrastructure, and we offer hosted, dedicated single-tenant, and self-hosted deployment options so customers can meet their own data residency and retention requirements. Learn more at [deepgram.com](http://deepgram.com). ### Responsibilities * Build, deploy, and maintain security controls across our bare-metal fleet and AWS footprint — access management, network segmentation and firewalling, encryption and secrets management, logging and detection coverage, endpoint security, and vulnerability management. * Own configuration management and host hardening as code with Ansible, so baselines are reproducible across hundreds of Linux hosts and drift is detectable rather than merely documented. * Secure containerized workloads: Docker image build pipelines, registry scanning, runtime hardening and detection, and secrets management. * Run vulnerability management end to end — discovery, prioritization by real exploitability rather than raw CVSS, driving remediation with engineering teams, and reporting on it. * Own patch and update management as a program: the server fleet, the endpoint fleet, base images, OS and package updates, firmware where it matters, and dependency upgrades. Set and hold patch SLAs, track exceptions, and automate the routine cases so they do not depend on anyone remembering. * Own the penetration testing lifecycle: scoping and vendor selection, scheduling, triaging findings into engineering work with real owners and dates, verifying fixes on retest, and producing the summary we can share with customers. * Write detections, tune out noise, and take part in incident response. Improve log, telemetry, and security-agent coverage where we are blind. * Run periodic log and access reviews as a standing control, and automate the collection so each cycle produces its own evidence rather than a scramble. * Automate compliance evidence collection for SOC 2, PCI DSS, and ISO 27001, and support audit fieldwork on technical questions — the GRC lead owns the auditor relationship and the narrative; you own the systems that make the evidence true and repeatable. * Harden GitHub Actions CI/CD and the software supply chain: dependency and secret scanning, action pinning, SBOM, artifact and image signing, least-privilege OIDC in place of long-lived credentials. * Apply AI and agentic tooling to security work — triage, evidence gathering, code review, detection engineering — and help secure how the rest of the company uses AI. * Provide the technical input behind customer-facing security work: questionnaire and architecture answers, penetration test summaries, and hardening guidance for customers running Deepgram self-hosted. ### Skills Needed * Solid experience in security engineering or infrastructure engineering with a security focus — enough that you have owned controls in production, not just recommended them. * Deep Linux. You should be comfortable hardening, debugging, and reasoning about a large fleet of physical Linux hosts — users and sudo, SSH, systemd, kernel and package updates, host firewalls, and what a host-based agent is actually doing. * Ansible at fleet scale is required. You automate first and document second. * Strong scripting. Python and/or Go, plus real shell competence. * Production experience securing Docker containers and the pipelines that build them. * Hands-on experience securing GitHub and GitHub Actions: branch protection, CODEOWNERS, workflow permissions, secrets, and third-party action risk. * Experience running vulnerability and patch management as an ongoing program — including the unglamorous part, which is getting other teams to actually ship the fix. * Experience managing third-party penetration tests from the inside: scoping them well, and turning a report into closed engineering work rather than a PDF in a folder. * Hands-on involvement in at least one formal audit — ISO 27001, PCI DSS, or SOC 2 — as the engineer producing and defending evidence, not only as a reader of the report. * Comfortable using AI coding and agentic tools in daily work, and clear-eyed about their risks: prompt injection, secret leakage, and supply chain exposure. * Pragmatic. Controls that block shipping without a proportionate risk reduction get routed around, and we would rather you name the trade-off than pretend it does not exist. ### Nice to Have * Datacenter or colocation experience: network segmentation, out-of-band management (IPMI/BMC), physical and vendor controls. * Detection engineering or SIEM/HIDS ownership at scale (for example Wazuh, OSSEC, Elastic). * Secrets management with HashiCorp Vault. * AWS security (IAM, SCPs, VPC) and Terraform. * Kubernetes security. * Offensive security background: penetration testing or red teaming. * PCI DSS work inside a cardholder data environment. * Ownership of a secure SDLC program. * Experience with GPU infrastructure, ML platforms, or multi-tenant inference workloads. * Certifications such as OSCP, GIAC, CISSP, or AWS Security Specialty. Notice: We’re aware of individuals impersonating Deepgram recruiters. All legitimate Deepgram recruiting communication comes from an @[deepgram.com](http://deepgram.com) email address. If you’ve received a message claiming to be Deepgram, please forward it to careers@deepgram.com. Show more [Apply now >](https://jobicy.com/jobs/161394-security-engineer-6.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 5/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThis is a broad, senior-level security engineering role spanning infrastructure, cloud, application supply chain, detection, compliance evidence, and incident response. Success requires independently designing durable controls for a fast-moving production environment with substantial bare-metal infrastructure. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$205,000US market range (per year)$175k–$240k0$264k AI insightThe employer discloses a yearly base compensation range of $165,000–$245,000 USD. The midpoint is $205,000 per year. Estimated US market compensation for a mid-to-senior Security Engineer with deep infrastructure and security automation responsibilities is approximately $175,000–$240,000 per year; this is an AI estimate, not verified salary research. ## Core skills Skills and capabilities most closely associated with this opportunity. [Security engineering](https://jobicy.com/jobs?search_keywords=Security%20engineering.md)[Linux hardening](https://jobicy.com/jobs?search_keywords=Linux%20hardening.md)[Ansible](https://jobicy.com/jobs?search_keywords=Ansible.md)[Docker security](https://jobicy.com/jobs?search_keywords=Docker%20security.md)[Vulnerability management](https://jobicy.com/jobs?search_keywords=Vulnerability%20management.md)[Patch management](https://jobicy.com/jobs?search_keywords=Patch%20management.md)[GitHub Actions security](https://jobicy.com/jobs?search_keywords=GitHub%20Actions%20security.md)[CI/CD security](https://jobicy.com/jobs?search_keywords=CICD%20security.md)[Supply chain security](https://jobicy.com/jobs?search_keywords=Supply%20chain%20security.md)[Python scripting](https://jobicy.com/jobs?search_keywords=Python%20scripting.md)[Shell scripting](https://jobicy.com/jobs?search_keywords=Shell%20scripting.md)[AWS security](https://jobicy.com/jobs?search_keywords=AWS%20security.md)[Incident response](https://jobicy.com/jobs?search_keywords=Incident%20response.md)[Detection engineering](https://jobicy.com/jobs?search_keywords=Detection%20engineering.md)[SOC 2 compliance](https://jobicy.com/jobs?search_keywords=SOC%202%20compliance.md) Sample interview questionsHow would you implement reproducible Linux host-hardening baselines across hundreds of physical servers?I would define version-controlled Ansible roles for identity, SSH, sudo, firewalling, package configuration, logging, endpoint agents, and baseline kernel settings. I would test roles in staged environments, apply them through controlled deployment waves, continuously detect drift, and publish automated compliance evidence from each run. How do you prioritize vulnerability remediation beyond raw CVSS scores? I combine severity with exploitability, internet exposure, asset criticality, privilege impact, known exploitation, compensating controls, and the availability of a reliable fix. This creates a risk-based remediation queue with clear owners, SLAs, documented exceptions, and verification that the remediation actually closed the exposure. What controls would you apply to secure GitHub Actions and the software supply chain? I would enforce branch protection and CODEOWNERS, restrict workflow permissions, use least-privilege OIDC instead of long-lived secrets, pin third-party actions to immutable commits, and scan dependencies, code, secrets, images, and artifacts. I would also generate SBOMs, sign artifacts and images, and monitor for risky workflow changes. Describe how you would manage a third-party penetration test from planning through closure. I would define a scope that reflects material attack paths, select a qualified vendor, establish rules of engagement, and make sure test access and environments are ready. After delivery, I would validate findings, translate them into tracked engineering work with owners and due dates, prioritize by real risk, verify remediations through retesting, and prepare a concise customer-safe summary. How would you use AI tooling in security engineering without creating unacceptable risk? I would use AI to accelerate triage, documentation, detection development, code review, and evidence gathering, while keeping human review and accountability for decisions. I would apply controls around data handling, secret redaction, tool permissions, prompt-injection resistance, output validation, and supply-chain review before integrating agentic workflows into production processes. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Chainguard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e4b6aacf-221.jpeg) Chainguard Nov 11 New ### [Security Analyst, Governance and Trust](https://jobicy.com/jobs/161420-security-analyst-governance-and-trust-2.md) Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations… * ![Filigran logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/7b905d81717f-221.webp) Filigran Nov 11 New ### [Staff AppSec / Product Security Engineer](https://jobicy.com/jobs/161366-staff-appsec-product-security-engineer.md) 🌀 The Company Founded in 2022, Filigran is a global cybersecurity company on a mission to empower defense teams to be proactive through open-source solutions that uncover threats and drive… * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Nov 11 New ### [Manager, Security Operations Center](https://jobicy.com/jobs/161297-manager-security-operations-center-2.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Nov 11 New ### [Blockchain Intelligence Analyst, Transnational Crime Organizations](https://jobicy.com/jobs/161263-blockchain-intelligence-analyst-transnational-crime-organizations.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![ŌURA logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/07/011c99434cd6-221.webp) ŌURA Nov 11 New ### [AI Security Engineer, Detection and Response](https://jobicy.com/jobs/161250-ai-security-engineer-detection-and-response.md) Our mission at ŌURA is to empower every person to own their inner potential. Our award-winning products help our global community gain a deeper knowledge of their readiness, activity, and… * ![EverAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91735b0b-221.png) EverAI Nov 11 New ### [Security Engineer (Remote – Denmark)](https://jobicy.com/jobs/161233-security-engineer-remote-denmark.md) Our Vision & Products 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in… * ![EverAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91735b0b-221.png) EverAI Nov 11 New ### [Security Engineer (Remote – Croatia)](https://jobicy.com/jobs/161231-security-engineer-remote-croatia.md) Our Vision & Products 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in… * ![EverAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91735b0b-221.png) EverAI Nov 11 New ### [Security Engineer (Remote – Hungary)](https://jobicy.com/jobs/161229-security-engineer-remote-hungary.md) Our Vision & Products 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in… * ![EverAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91735b0b-221.png) EverAI Nov 11 New ### [Security Engineer (Remote – Spain)](https://jobicy.com/jobs/161227-security-engineer-remote-spain.md) Our Vision & Products 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in… * ![EverAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91735b0b-221.png) EverAI Nov 11 New ### [Security Engineer (Remote – Netherlands)](https://jobicy.com/jobs/161225-security-engineer-remote-netherlands.md) Our Vision & Products 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in… [Browse all jobs](https://jobicy.com/jobs.md)