Infrastructure Security Engineer

We're looking for a Security Engineer to join the ElevenLabs Security team. In this role, you'll work at the intersection of security, software and infrastructure engineering, building the platforms, controls and tooling that let teams ship and operate cloud infrastructure securely at high velocity.

You will:

• Design and build security tools and guardrails that integrate directly into our infrastructure and products

• Partner with Engineering and Infrastructure teams to review application architectures, develop threat models and build in secure by default patterns throughout the software development lifecycle

• Identify, prioritise and remediate security vulnerabilities, working directly with engineers and contributing to fixes where required, across the entire stack.

• Ship new security features which directly improve the security posture of our products in production

• Design and implement supply chain security controls across build and deployment pipelines, including artefact signing, provenance, dynamic admission controls and SBOM generation

ElevenLabs is an AI research and product company transforming how we interact with technology.

We launched in January 2023 with the first human-like AI voice model. Today, we serve millions of users and thousands of businesses - from fast-growing startups to large enterprises like Deutsche Telekom and Meta. Our investors are some of the world's most prominent, including Andreessen Horowitz, ICONIQ Growth and Sequoia. We've raised $781M in funding and our last valuation was $11B - multiples of 11, always.

We have expanded from voice into three main platforms:

• ElevenAgents enables businesses to deliver seamless and intelligent customer experiences, with the integrations, testing, monitoring, and reliability necessary to deploy voice and chat agents at scale.

• ElevenCreative empowers creators and marketers to generate and edit speech, music, image, and video across 70+ languages.

• ElevenAPI gives developers access to our leading AI audio foundational models.

Everything we do is the result of the creativity and commitment of our team - builders doing the best work of their lives. We are researchers, engineers, and operators. IOI medalists and ex-founders. If you want to work hard and create lasting positive impact, we want to hear from you.

• High-velocity: Rapid experimentation, lean autonomous teams, and minimal bureaucracy.

• Impact not job titles: We don't have job titles. Instead, it's about the impact you have. No task is above or beneath you.

• AI first: We use AI to move faster with higher-quality results. We do this across the whole company-from engineering to growth to operations.

• Excellence everywhere: Everything we do should match the quality of our AI models.

• Global team: We prioritize your talent, not your location.

This role is remote and can be executed globally. However, to facilitate working with the Security Team, we prefer candidates based in GMT to GMT+3 or UK. If you prefer, you can work from our offices in London or Warsaw

We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses.

• Strong engineering background, with experience building and shipping production systems

• Proven track record of building and scaling security programs

• Fluency in at least one programming language (Python, Typescript, Golang etc) with the ability to read, write and maintain production quality code

• Hands on experience in cloud-native environments (AWS or GCP), Kubernetes, and infrastructure-as-code (Terraform)

• Strong understanding of cloud security fundamentals: IAM, networking, PKI, linux internals

• Experience securing CI/CD pipelines to prevent supply chain attacks

• Experience securing AI or Machine Learning systems, including training pipelines

• Background in developer experience or platform engineering, especially building developer tooling

• Contributions to open source security projects, published research or talks at security conferences

• Experience working in regulated environments (SOC 2, ISO27001, PCI, HIPAA or similar)