Senior Security Engineer - Harden CI/CD & Cloud Security

LiteLLM; San Francisco (CA); In loco; USD 180.000 - 240.000; Tempo pieno

Descrizione del lavoro

LiteLLM is seeking a Senior Security Engineer to secure our application, infrastructure, and software delivery pipeline. This hands-on role reports to the security lead and prefers San Francisco, but not required.

You’ll own your roadmap, implement improvements yourself, and work directly with engineers to review and harden Python code, secure releases, and embed security into how we build. You’ll prioritize risks and drive lasting engineering improvements across CI/CD, cloud security, and

Competenze

• 7+ years of relevant experience, including independent ownership of a security scope.
• Experience hardening a production CI/CD pipeline, including GitHub Actions permissions and keyless signing.
• Strong knowledge of a major cloud provider, preferably AWS, including IAM, secrets management, and workload identity.
• Familiarity with Terraform.
• Ability to read production Python web-service code, identify vulnerabilities, and implement fixes.
• Experience building security tooling and guardrails that engineering teams adopted.
• Strong judgment about prioritization and risk when several problems need attention at once.
• Excellent written and verbal communication, including the ability to coordinate across time zones independently.

Mansioni

• Review and harden LiteLLM’s Python codebase, fixing vulnerabilities and addressing their underlying causes.
• Review sensitive pull requests and architecture changes before they reach production.
• Harden our build and release pipeline, including GitHub Actions permissions, workload identity, signing, and credential handling.
• Build and maintain automated controls for secrets detection, credential management, and software release integrity.
• Review cloud architecture, IAM, secrets management, and workload identity, and implement security improvements.
• Build guardrails and secure defaults that fit how engineers work.
• Document our security architecture, decisions, and operating practices.
• Own delivery and ongoing maintenance of product and pipeline security improvements.

Conoscenze

Security engineering

Cloud security (AWS)

CI/CD security

Terraform

Python code review

Incident response

Security tooling

Strumenti

GitHub Actions

Descrizione del lavoro

LiteLLM is seeking a Senior Security Engineer to secure our application, infrastructure, and software delivery pipeline. This hands-on role reports to the security lead and prefers San Francisco, but not required.

You’ll own your roadmap, implement improvements yourself, and work directly with engineers to review and harden Python code, secure releases, and embed security into how we build. You’ll prioritize risks and drive lasting engineering improvements across CI/CD, cloud security, and