← All roles

Senior Security Engineer

LiteLLM
Apply on company site
Remote$220k - $260kFull-timePosted 2mo ago

About the role

LiteLLM is seeking the company’s first Security Engineer to secure its application, infrastructure, and software-delivery pipeline. This hands-on security generalist role emphasizes application security, with responsibilities across IT, CI/CD, cloud infrastructure, and the software supply chain.

Responsibilities

  • Application security: Conduct deep security reviews of LiteLLM’s Python proxy, APIs, authentication systems, and enterprise features; Identify and remediate vulnerabilities involving authentication, authorization, secrets, tenant isolation, injection, and data exposure; Partner with engineers throughout design, implementation, code review, and release; Build application-security tooling into the development lifecycle (SAST, DAST, dependency scanning, secrets detection); Perform internal red teaming and adversarial testing against LiteLLM’s APIs, proxy, and LLM-specific attack surfaces; Threat-model new products and architecture changes; Create secure coding guidelines and train engineers.
  • Infrastructure, CI/CD, and supply-chain security: Harden Docker images, PyPI packages, GitHub Actions workflows, and release infrastructure; Detect dependency confusion, poisoned packages, compromised dependencies, exposed secrets, and unsafe build practices; Implement SBOMs, signed builds, provenance checks, and reproducible-build practices; Design secure-by-default configurations for cloud and self-hosted deployments (authentication, IAM, secrets management, key rotation); Review cloud infrastructure, network boundaries, access controls, and production deployment patterns.
  • IT security and incident response: Strengthen employee identity, device, SaaS, and internal access controls; Build monitoring and anomaly detection for suspicious API, model, authentication, and routing activity; Lead security incident response, vulnerability assessment, remediation, post-mortems, and stakeholder communication; Establish vulnerability intake, CVE triage, disclosure, and remediation processes; Maintain threat models as product and architecture evolve.

Qualifications

  • Bachelor’s or Master’s degree in Computer Science or a related field, or equivalent practical experience.

Skills

Required:Security generalist experience across application security, IT, CI/CD, cloud infrastructure, and software supply chainDeep application-security expertise (manual auditing of production Python code)Authentication and authorization, tenant isolation, and common web/API vulnerabilitiesSecurity tooling (Semgrep, Bandit, CodeQL, Burp Suite, SAST/DAST)OAuth2, JWT, mTLS, IAM and high-throughput API authenticationIncident response, CVSS scoring, vulnerability management, CVE triage
Nice to have:SBOMs, Sigstore, Cosign, Snyk, Grype, Trivy or equivalent toolingPrompt injection, LLM data exfiltration, tool abuse, OWASP Top 10 for LLM ApplicationsCTF participation or vulnerability research

Benefits

  • Competitive salary and health, dental, and vision benefits.
Last updated Sep 23, 2026. Interested? Apply on the company site.
LiteLLM logo

About LiteLLM

Call every LLM API like it's OpenAI [100+ LLMs]

LiteLLM is an open-source LLM Gateway with 18K+ stars on GitHub and trusted by companies like Rocket Money, Samsara, Lemonade, and Adobe. LiteLLM provides an open source Python SDK and Python FastAPI Server that allows calling 100+ LLM APIs (Bedrock, Azure, OpenAI, VertexAI, Cohere, Anthropic) in the OpenAI format We have raised a $1.6M seed round from Y Combinator, Gravity Fund and Pioneer Fund

aiopsartificial-intelligencedeveloper-toolsgenerative-aiopen-source
Company profileWebsite

More open roles at LiteLLM