Senior Security Engineer: CI/CD & Cloud Security Lead

LiteLLM; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

LiteLLM is seeking a Senior Security Engineer to secure the application, infrastructure, and software delivery pipeline. This hands-on IC role reports to the security lead and involves hardening the Python codebase, securing releases, and embedding security into how LiteLLM builds. San Francisco is preferred, but not required.

You will own your roadmap, implement improvements, and explain tradeoffs. The ideal candidate has built a security program and can translate findings into lasting

Qualifications

• 7+ years of independent security ownership, and proven delivery of security program outcomes.
• Experience hardening production CI/CD pipelines and GitHub Actions permissions.
• Strong AWS knowledge with IAM, secrets management, and workload identity.
• Familiarity with Terraform and cloud architecture reviews.
• Ability to read production Python web services and remediate vulnerabilities.
• Experience building security tooling adopted by engineering teams.
• Excellent prioritization and risk-tradeoff communication.

Responsibilities

• Review and harden Python codebase, fix vulnerabilities, and address root causes.
• Review sensitive PRs and architecture changes before production deployment.
• Hardening build/release pipeline, including signing and credential handling.
• Build automated controls for secrets detection and release integrity.
• Assess cloud architecture, IAM, secrets, and workload identity for improvements.
• Create guardrails and secure defaults aligned with engineering workflows.
• Document security architecture, decisions, and operating practices.
• Own delivery and maintenance of product and pipeline security improvements.

Skills

Security ownership

CI/CD security

AWS IAM

Terraform

Python security

Security tooling

Risk prioritization

Communication skills

Tools

GitHub Actions

Job description

LiteLLM is seeking a Senior Security Engineer to secure the application, infrastructure, and software delivery pipeline. This hands-on IC role reports to the security lead and involves hardening the Python codebase, securing releases, and embedding security into how LiteLLM builds. San Francisco is preferred, but not required.

You will own your roadmap, implement improvements, and explain tradeoffs. The ideal candidate has built a security program and can translate findings into lasting