Vapi

Member of Technical Staff, DevSecOps

San Francisco, California, United StatesFull timeStaff$180,000 - $280,000 / yearPosted 11 days ago
Apply on Vapi →

Sign into see who you know at Vapi.

Voice AI that resolves, not transfers.

Most phone systems trap callers in menus and scripts. Vapi is the platform for deploying voice agents that know your business and can listen, adapt, and resolve in minutes.

- The numbers: 1 billion calls. 1 million developers. 10x enterprise ARR growth

- The customers: Amazon Ring, ServiceTitan, New York Life, Intuit, Kavak, and thousands more, from YC startups to the Fortune 500

- The news: a $50M Series B led by Peak XV Partners, with Bessemer Venture Partners, Kleiner Perkins, M12 (Microsoft's Venture Fund), Y Combinator, and our earlier backers. Total raised: $72M

ABOUT THE ROLE

Vapi is deployed for multiple large enterprises, including several Fortune 500s, across regions around the world (including the EU and Australia). We're hiring a DevSecOps Lead to build and harden the security posture of our product and underlying infrastructure as we scale upmarket — so we stay compliant, secure, and ahead of what regulated enterprise customers expect.

 

This is a hands-on senior IC / lead role reporting to Tejas Siripurapu in Core Engineering. You'll partner closely with InfoSec, Engineering, and GTM, and your work will directly determine how confidently the largest companies in the world can run on Vapi.

 

WHAT YOU'LL DO

- Make Vapi's security posture world-class for the enterprise — shift security left, catch regressions during code review and CI, and harden our multi-tenant infrastructure as we onboard the Fortune 500.

- Build automation as a security primitive — including agentic systems that run penetration tests against staging ahead of every release, and that auto-remediate issues as they surface.

- Own the compliance roadmap end-to-end alongside InfoSec, including Drata and the automations that keep us audit-ready as we expand into new regions and regulated industries.

- Partner deeply with Engineering, InfoSec, and GRC — building guardrails developers actually use, not ad-hoc controls bolted on...