Security Engineer
Deepgram · Remote · USA - Remote ·
COMPENSATION
$165k – $245k
Listed on the employer's job board (Ashby)
- Fully remote
- Bare-metal & AWS
- Linux + Ansible
- Docker security
- Mid to Senior level
Join Deepgram to build and automate the technical foundations of their security program. You will manage security controls for a GPU-intensive, bare-metal infrastructure running containerized workloads, ensuring reproducibility and audit readiness.
This hands-on engineering role involves hardening hosts, securing CI/CD pipelines, and managing vulnerability programs. You will collaborate with a GRC lead to provide technical evidence for SOC 2, PCI DSS, and ISO 27001 audits while leveraging AI tools to enhance security operations.
What you'll do
- Build and maintain security controls across bare-metal fleets and AWS
- Manage host hardening and configuration as code using Ansible
- Secure Docker container pipelines, registries, and runtime environments
- Run end-to-end vulnerability and patch management programs
- Oversee penetration testing lifecycle from scoping to fix verification
- Automate compliance evidence collection for SOC 2, PCI DSS, and ISO 27001
- Harden GitHub Actions CI/CD and secure the software supply chain
- Apply AI tooling to security tasks like triage and detection engineering
What you'll need
- Proven experience owning security controls in production environments
- Deep expertise in Linux hardening, debugging, and fleet management
- Required proficiency with Ansible at scale for automation
- Strong scripting skills in Python, Go, or Shell
- Experience securing Docker containers and build pipelines
- Hands-on knowledge of GitHub Actions security and workflow permissions
- Background in managing vulnerability and patch management programs
- Experience producing technical evidence for formal audits like ISO 27001
Nice to have
- Experience with datacenter colocation and out-of-band management
- Background in detection engineering or SIEM ownership
- Familiarity with HashiCorp Vault for secrets management
- Knowledge of AWS security services and Terraform
- Experience with Kubernetes security
- Offensive security background such as penetration testing
- Work experience in cardholder data environments for PCI DSS
- Certifications like OSCP, GIAC, CISSP, or AWS Security Specialty
Stack
- Linux
- Ansible
- Docker
- Python
- Go
- GitHub Actions
- AWS
- Terraform
- HashiCorp Vault
- Kubernetes
How you'll work
- Fully remote position
- AI-first mindset required for daily workflows
- Fast-paced environment with rapid technological changes
- Reports to the Director of Information Security