Infrastructure Engineer - Security

Infrastructure Engineer – Security

As an Infrastructure Engineer – Security, you'll be the primary owner of security within our infrastructure and codebase. This is a hands-on engineering role — you'll design, implement, and automate secure systems across our platform, working closely with backend and DevOps teams to ensure that security is built into everything we deploy. You'll also play a key role in maturing our compliance posture (SOC 2, HIPAA, ISO27001, GDPR, HITRUST) as we scale.

What You'll Do

• Build, secure, and maintain our infrastructure across AWS and other cloud environments

• Write production-quality code (Python, TypeScript, or similar) to automate, test, and harden systems

• Own the InfoSec function end-to-end, including:

  • Secure coding practices and threat modeling

  • Infrastructure security (network hardening, IAM, secret management, secure deployments)

  • Application security reviews and vulnerability remediation

  • Compliance programs (SOC 2, HIPAA, ISO 27001, etc.)

  • Incident response planning and postmortems

• Collaborate with engineering to embed security into the development lifecycle

• Build and maintain security monitoring, alerting, and response systems

• Act as a security advocate within the team, mentoring engineers on best practices

Who You Are

• 3+ years of professional software engineering experience (writing and reviewing production code)

• 2+ years of infrastructure or DevOps experience (cloud platforms, networking, automation, etc.)

• Strong understanding of security risks and mitigations (OWASP, cloud security, CI/CD best practices)

• Experience with infrastructure-as-code (Terraform, CloudFormation, Pulumi, etc.)

• Hands-on experience with security tooling (static/dynamic analysis, vulnerability scanning, intrusion detection, etc.)

• Bias for ownership, automation, and continuous improvement

• Nice to have:

  • Experience leading security initiatives in a fast-scaling startup

  • Familiarity with SOC 2 or ISO 27001 compliance programs

  • Prior penetration testing or incident response experience

Why Vapi

• Define the future of human–AI interaction: help pioneer a new era of voice-based AI products that are transforming how people and businesses communicate

• Own meaningful work at a breakout startup: join early, take real ownership, and have a direct hand in building a category-defining company from the ground up

• Surround yourself with exceptional people: work alongside a world-class team of engineers, operators, and builders backed by top-tier investors who believe in our mission

• Accelerate your career in a high-growth environment: grow fast, take on big challenges, and unlock opportunities as we scale one of the most exciting platforms in AI

What We Offer

• Competitive compensation: includes a strong base salary and meaningful equity ownership

• Comprehensive health coverage: medical, dental, and vision plans

• Flexible time off: take-what-you-need vacation policy with an emphasis on rest and balance

• Daily meals: catered lunches and dinners provided for in-office days

• Lifestyle & wellness stipends: monthly allowances to support rent, transportation, food, fitness, and mental well-being

• Professional development: annual learning stipends for courses, conferences, and upskilling

• Team connection: regular offsites, team events, and opportunities to build in-person relationships