This is a hands-on security generalist role with a strong emphasis on application security. You’ll spend most of your time reviewing and hardening LiteLLM’s Python codebase, identifying new attack surfaces, working directly with engineers to fix vulnerabilities, and making secure development practices part of how we build.

You’ll also own security work across IT, CI/CD, cloud infrastructure, and the software supply chain. The ideal candidate has built application/product/infrastructure security programs from scratch and genuinely enjoys security outside of work—through CTFs, vulnerability research, open-source projects, or independent experimentation.

Application security

Conduct deep security reviews of LiteLLM’s Python proxy, APIs, authentication systems, and enterprise features.

Identify and remediate vulnerabilities involving authentication, authorization, secrets, tenant isolation, injection, and data exposure.

Partner directly with engineers throughout design, implementation, code review, and release—not only after code is shipped.

Build application-security tooling into the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection.

Perform internal red teaming and adversarial testing against LiteLLM’s APIs, proxy, and LLM-specific attack surfaces.

Threat-model new products and architecture changes before they reach production.

Create secure coding guidelines and train engineers on common vulnerabilities and defensive practices.

Infrastructure, CI/CD, and supply-chain security

Harden LiteLLM’s Docker images, PyPI packages, GitHub Actions workflows, and release infrastructure.

Senior Security Engineer

Responsibilities

Qualification

Required

Benefits

Company

Litellm

More roles at Litellm