Senior Security Engineer
LiteLLMAI Infrastructure company
RemoteSenior
Y Combinator
Gravity Fund
Pioneer Fund
Software Engineering
About the role
TL;DR
Secure LiteLLM’s application, infrastructure, and software-delivery pipeline.
- •This is a hands-on security generalist role with a strong emphasis on application security.
- •You’ll spend most of your time reviewing and hardening LiteLLM’s Python codebase, identifying new attack surfaces, working directly with engineers to fix vulnerabilities, and making secure development practices part of how we build.
- •Key Responsibilities Conduct deep security reviews of LiteLLM’s Python proxy, APIs, authentication systems, and enterprise features.
- •Identify and remediate vulnerabilities involving authentication, authorization, secrets, tenant isolation, injection, and data exposure.
- •Partner directly with engineers throughout design, implementation, code review, and release—not only after code is shipped.
- •Build application-security tooling into the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection.
- •Perform internal red teaming and adversarial testing against LiteLLM’s APIs, proxy, and LLM-specific attack surfaces.
- •Requirements A strong security generalist who can work across application security, IT, CI/CD, cloud infrastructure, and the software supply chain.
- •Deep application-security expertise, including manually auditing production Python code and working with engineers to remediate vulnerabilities.
- •Strong understanding of authentication, authorization, tenant isolation, SSRF, injection, deserialization, secrets management, and common web and API vulnerabilities.
- •Experience using and configuring tools such as Semgrep, Bandit, CodeQL, Burp Suite, and other SAST or DAST tooling.
Required skills
PythonOAuthJWTIAMSSOMFADockerGitHub ActionsCI/CDKubernetesPrometheusGrafanaDatadogNew RelicPagerDuty
Domain expertise
cybersecurity
Benefits & perks
Competitive salary, Health, dental, and vision benefits
Tech stack
PythonOAuthJWTIAMSSOMFADockerGitHub ActionsCI/CDKubernetesPrometheusGrafanaDatadogNew RelicPagerDutyNginxHAProxyGitLinux