Senior Security Engineer

LiteLLM

8d•$220,000 - $260,000

About The Position

LiteLLM is hiring its first Security Engineer to secure its application, infrastructure, and software-delivery pipeline. This is a hands-on security generalist role with a strong emphasis on application security. The engineer will review and harden LiteLLM’s Python codebase, identify attack surfaces, work with engineers to remediate vulnerabilities, and integrate secure development practices into the product lifecycle. The role also owns security across IT, CI/CD, cloud infrastructure, and the software supply chain. LiteLLM is a Python SDK and Proxy Server that provides access to more than 100 LLM APIs through the OpenAI format. The position offers broad technical ownership and the opportunity to shape security practices for an open-source product used by enterprises.

Requirements

Deep application-security expertise, including manually auditing production Python code and working with engineers to remediate vulnerabilities.
Strong understanding of authentication, authorization, tenant isolation, SSRF, injection, deserialization, secrets management, and common web and API vulnerabilities.
Experience using and configuring tools such as Semgrep, Bandit, CodeQL, Burp Suite, and other SAST or DAST tooling.
Previous experience at an early-stage security startup during its 0→1 journey.
Experience securing containers, GitHub Actions, build pipelines, packages, and software dependencies.
Strong knowledge of OAuth2, JWT, mTLS, IAM, and high-throughput API authentication.
Experience with incident response, CVSS scoring, vulnerability management, CVE triage, and coordinated disclosure.
Bachelor’s or Master’s degree in Computer Science or a related field, or equivalent practical experience.

Nice To Haves

Familiarity with SBOMs, Sigstore, Cosign, Snyk, Grype, Trivy, or equivalent tooling.
Familiarity with prompt injection, LLM data exfiltration, tool abuse, and the OWASP Top 10 for LLM Applications.
Experience competing in CTFs during college or independently pursuing vulnerability research, reverse engineering, bug bounties, or security projects.
A genuine interest in security outside the day job, demonstrated by exploring attack techniques, building security projects, or contributing to the security community.

Responsibilities

Conduct deep security reviews of LiteLLM’s Python proxy, APIs, authentication systems, and enterprise features.
Identify and remediate vulnerabilities involving authentication, authorization, secrets, tenant isolation, injection, and data exposure.
Partner with engineers throughout design, implementation, code review, and release to address security issues.
Integrate application-security tools into the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection.
Perform internal red teaming and adversarial testing against LiteLLM’s APIs, proxy, and LLM-specific attack surfaces.
Threat-model new products and architecture changes before production.
Create secure-coding guidelines and train engineers on vulnerabilities and defensive practices.
Harden Docker images, PyPI packages, GitHub Actions workflows, and release infrastructure.
Detect dependency confusion, poisoned or compromised packages and dependencies, exposed secrets, and unsafe build practices.
Implement SBOMs, signed builds, provenance checks, and reproducible-build practices.
Design secure-by-default configurations for cloud and self-hosted deployments, including authentication, IAM, secrets management, and key rotation.
Review cloud infrastructure, network boundaries, access controls, and production deployment patterns.
Strengthen employee identity, device, SaaS, and internal access controls.
Build monitoring and anomaly detection for suspicious API, model, authentication, and routing activity.
Lead security incident response, vulnerability assessment, remediation, post-mortems, and stakeholder communication.
Establish vulnerability intake, CVE triage, disclosure, and remediation processes.
Maintain threat models as the product and architecture evolve.