Senior Security Engineer: App & Cloud Security Lead

LiteLLM; United States; Remote; USD 180,000 - 250,000; Full time

Benefits offered by this job

Competitive salary

Health benefits

Dental benefits

Vision benefits

Job summary

LiteLLM is hiring a Senior Security Engineer to own security across the application, infrastructure, and software-delivery pipeline. You will audit and harden Python code, work closely with engineers to fix vulnerabilities, and integrate secure practices into the development lifecycle.

You will own security across IT, CI/CD, cloud infrastructure, and the software supply chain, building programs from scratch and staying engaged with the security community through CTFs or independent projects.

Qualifications

• Hands-on security generalist with cross-domain expertise in app, infra, and pipeline security.
• Deep auditing of Python code, secure coding practices, and vulnerability remediation.
• Experience with OAuth2, JWT, mTLS, IAM and API security controls.
• Familiarity with SBOMs, Sigstore, Cosign, Snyk, Grype, Trivy or equivalent tooling.
• Experience attracting and guiding engineers toward secure development practices.

Responsibilities

• Conduct deep security reviews of LiteLLM’s Python proxy, APIs, and auth systems.
• Identify and remediate auth, data exposure, injection, and tenancy vulnerabilities.
• Embed secure development practices across design, code review, and release.
• Build app-security tooling into the CI/CD lifecycle (SAST/DAST, dependencies, secrets).
• Perform red teaming and adversarial testing on APIs and LLM surfaces.
• Threat-model new products and maintain secure defaults across cloud deployments.
• Train engineers on secure coding guidelines and vulnerability awareness.

Skills

App security

Security generalist

CI/CD security

Cloud security

Threat modeling

Incident response

SBOMs

SAST/DAST tools

Vulnerability research

OWASP Top10

CTF experience

Education

Bachelor’s or Master’s in CS

Tools

Semgrep

Bandit

CodeQL

Burp Suite

Snyk

Grype

Trivy

Sigstore

Cosign

Job description

LiteLLM is hiring a Senior Security Engineer to own security across the application, infrastructure, and software-delivery pipeline. You will audit and harden Python code, work closely with engineers to fix vulnerabilities, and integrate secure practices into the development lifecycle.

You will own security across IT, CI/CD, cloud infrastructure, and the software supply chain, building programs from scratch and staying engaged with the security community through CTFs or independent projects.