Senior Security Engineer - AI Platform & App Security

LiteLLM; United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Dental and Vision benefits

Competitive salary

Job summary

LiteLLM is seeking a Senior Security Engineer to own the security of the application, infrastructure, and software-delivery pipeline. You will harden Python code, review architectures, and partner with engineers to fix vulnerabilities while embedding secure development practices across teams.

You’ll lead IT and CI/CD security, cloud-infrastructure hardening, and the software supply chain, bringing startup experience from 0→1 to build robust security tooling and processes.

Qualifications

• Security generalist capable of spanning application security, IT, CI/CD, cloud infrastructure, and software supply chain.
• Deep application-security expertise including manual auditing of Python code and remediation with engineers.
• Strong knowledge of authentication, authorization, tenant isolation, SSRF, injection, deserialization, secrets management, and web/API vulnerabilities.
• Experience with security tooling such as Semgrep, Bandit, CodeQL, Burp Suite, and other SAST/DAST tools.
• Earlier experience at a security startup during its 0→1 phase is highly valued.
• Experience securing containers, GitHub Actions, build pipelines, packages, and dependencies.
• Familiarity with SBOMs, Sigstore, Cosign, Snyk, Grype, Trivy, or equivalents.
• Knowledge of OAuth2, JWT, mTLS, IAM, and high-throughput API authentication.
• Awareness of prompt injection, LLM data exfiltration, and OWASP Top 10 for LLM apps.
• Incident response, CVSS scoring, vulnerability management, CVE triage, and coordinated disclosure.
• Active participation in security communities, CTFs, vulnerability research, or security projects.
• Bachelor’s or Master’s degree in CS or related field or equivalent practical experience.

Responsibilities

• Conduct deep security reviews of LiteLLM’s Python proxy, APIs, authentication systems, and enterprise features.
• Identify and remediate vulnerabilities across authentication, authorization, secrets, tenant isolation, injection, and data exposure.
• Partner with engineers across design, implementation, code review, and release to embed security.
• Build application-security tooling into the development lifecycle (SAST, DAST, dependency scanning, secrets detection).
• Perform internal red-teaming and adversarial testing against APIs, proxy, and LLM-specific surfaces.
• Threat-model new products and architecture changes before production.
• Create secure coding guidelines and train engineers on common vulnerabilities.

Skills

Security generalist

Application security

Cloud infrastructure

CI/CD security

Vulnerability remediation

Education

Bachelor’s or Master’s degree in Computer Science or related field

Tools

Semgrep

Bandit

CodeQL

Burp Suite

SAST/DAST tooling

Job description

LiteLLM is seeking a Senior Security Engineer to own the security of the application, infrastructure, and software-delivery pipeline. You will harden Python code, review architectures, and partner with engineers to fix vulnerabilities while embedding secure development practices across teams.

You’ll lead IT and CI/CD security, cloud-infrastructure hardening, and the software supply chain, bringing startup experience from 0→1 to build robust security tooling and processes.