About this role
Deepgram builds foundational voice AI infrastructure, offering real-time speech-to-text, text-to-speech, and scalable voice agent APIs utilized by developers and global enterprises. Operating on a GPU-intensive bare-metal fleet alongside cloud services, the engineering group requires a dedicated security practitioner to build, automate, and scale technical controls across physical servers and containerized workloads. Day-to-day work centers on managing host hardening, vulnerability workflows, penetration testing, supply chain security, and the engineering evidence required for compliance frameworks like SOC 2 and ISO 27001.
Operating within a fast-moving, high-trust environment, the incoming engineer will aggressively leverage AI and agentic tooling to handle significant surface area on a lean team. Success in the role demands a hands-on technical builder who automates first, thrives on rapid iteration, and embraces a culture where AI utilization is core to everyday operations. Ideal candidates bring deep Linux and configuration management expertise, coupled with a practical approach to securing complex, modern infrastructure.
What you will do
- Build, deploy, and maintain robust security controls across a large bare-metal Linux fleet and cloud footprint.
- Automate configuration management, host hardening, and compliance evidence collection using Ansible at scale.
- Manage end-to-end vulnerability and patch programs, prioritizing real exploitability and driving remediation across engineering teams.
- Secure containerized workloads, CI/CD pipelines in GitHub Actions, and software supply chain components.
- Coordinate third-party penetration testing, triage findings into actionable work, and verify fixes.
- Write security detections, participate in incident response, and help secure internal and customer-facing AI systems.
What you need
- Demonstrated professional background in security engineering or infrastructure engineering with a strong security focus.
- Deep, hands-on Linux expertise including fleet hardening, debugging, systemd, and host-level firewalls.
- Extensive experience using Ansible for fleet-scale automation and configuration management.
- Strong scripting abilities in Python and/or Go, combined with solid shell scripting competence.
- Production-level experience securing Docker containers, container registries, and image build pipelines.
- Hands-on background securing GitHub environments and managing formal audits such as SOC 2, PCI DSS, or ISO 27001.
Benefits
- Offers Equity
- Offers Bonus
Skills and tech stack
Questions candidates ask
Where is this role located?
The position is fully remote within the USA.
What is the compensation range for this role?
The published compensation range is $150K to $245K, alongside offered equity and bonuses.
What level of seniority is Deepgram looking for?
The company is open on level, with strong mid-level and senior candidates both in scope and titles calibrated to demonstrated experience.
What infrastructure does the security team protect?
Most infrastructure runs on bare metal in colocation datacenters that are GPU-intensive and containerized with Docker, alongside AWS used for overflow capacity.