Senior Security Engineer, Product & Platform
About The Position
LiteLLM is hiring a Senior Security Engineer for a hands-on individual contributor role focused on securing its application, infrastructure, and software delivery pipeline. The role reports to the security lead and works directly with engineers to review and harden LiteLLM’s Python codebase, secure releases, and integrate security into the software development process. The engineer will own a security roadmap, implement improvements, make day-to-day decisions independently, and prioritize competing risks while explaining the tradeoffs. The ideal candidate has built and owned a product, platform, or infrastructure security program and can turn security findings into lasting engineering improvements. San Francisco is preferred, but not required.
Requirements
- At least 7 years of relevant experience, including independent ownership of a security scope.
- Experience hardening a production CI/CD pipeline, including GitHub Actions permissions and keyless signing.
- Strong knowledge of a major cloud provider, preferably AWS, including IAM, secrets management, and workload identity.
- Familiarity with Terraform.
- Ability to read production Python web-service code, identify vulnerabilities, and implement fixes.
- Experience building security tooling and guardrails adopted by engineering teams.
- Strong judgment in prioritizing risk when several problems need attention at once.
- Excellent written and verbal communication, including the ability to coordinate independently across time zones.
Nice To Haves
- Experience as the first or second security hire at a developer-tools or open-source company.
- A background in software, platform, or infrastructure engineering.
- Experience leading platform or infrastructure security, defining roadmaps, and owning the security of releases.
Responsibilities
- Review and harden LiteLLM’s Python codebase, fixing vulnerabilities and addressing their underlying causes.
- Review sensitive pull requests and architecture changes before they reach production.
- Harden the build and release pipeline, including GitHub Actions permissions, workload identity, signing, and credential handling.
- Build and maintain automated controls for secrets detection, credential management, and software release integrity.
- Review cloud architecture, IAM, secrets management, and workload identity, and implement security improvements.
- Build guardrails and secure defaults that fit how engineers work.
- Document security architecture, decisions, and operating practices.
- Own delivery and ongoing maintenance of product and pipeline security improvements.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
