{"id":62212,"url":"https://alion.io/job/litellm-senior-security-engineer","title":"Senior Security Engineer","company":{"id":20631,"name":"LiteLLM","domain":"litellm.ai","url":"https://alion.io/company/litellm","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":100,"open_postings":10,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":46,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":220000,"max":260000,"currency":"USD","period":"year","gross":null,"usd_annual":260000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"bandit","optional":false},{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"CodeQL","optional":false},{"name":"Cosign","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Grype","optional":false},{"name":"IAM","optional":false},{"name":"LiteLLM","optional":false},{"name":"LLM","optional":false},{"name":"OpenAI","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Semgrep","optional":false},{"name":"Sigstore","optional":false},{"name":"Snyk","optional":false},{"name":"Trivy","optional":false}],"status":"live","first_seen_at":"2026-07-25T21:49:08Z","employer_posted_date":"2026-10-31","last_verified_at":"2026-11-02T03:40:37Z","board_verified":true,"closed_at":null,"days_open":99,"trust":{"level":"ok","repost_count":1,"flags":["company_stale"],"days_open":99},"description":"Senior Security Engineer\nLiteLLM is the world’s most popular AI Gateway, trusted by companies like Adobe, Netflix, and NASA. Our platform gives developers secure, reliable access to LLMs and adjacent services. We’re looking for our first Security Engineer to help secure LiteLLM’s application, infrastructure, and software-delivery pipeline.\nAbout the role\nThis is a hands-on security generalist role with a strong emphasis on application security. You’ll spend most of your time reviewing and hardening LiteLLM’s Python codebase, identifying new attack surfaces, working directly with engineers to fix vulnerabilities, and making secure development practices part of how we build.\nYou’ll also own security work across IT, CI/CD, cloud infrastructure, and the software supply chain. The ideal candidate has built application/product/infrastructure security programs from scratch and genuinely enjoys security outside of work-through CTFs, vulnerability research, open-source projects, or independent experimentation.\nResponsibilities\nApplication security\nConduct deep security reviews of LiteLLM’s Python proxy, APIs, authentication systems, and enterprise features.\n\nIdentify and remediate vulnerabilities involving authentication, authorization, secrets, tenant isolation, injection, and data exposure.\n\nPartner directly with engineers throughout design, implementation, code review, and release-not only after code is shipped.\n\nBuild application-security tooling into the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection.\n\nPerform internal red teaming and adversarial testing against LiteLLM’s APIs, proxy, and LLM-specific attack surfaces.\n\nThreat-model new products and architecture changes before they reach production.\n\nCreate secure coding guidelines and train engineers on common vulnerabilities and defensive practices.\n\nInfrastructure, CI/CD, and supply-chain security\nHarden LiteLLM’s Docker images, PyPI packages, GitHub Actions workflows, and release infrastructure.\n\nDetect dependency confusion, poisoned packages, compromised dependencies, exposed secrets, and unsafe build practices.\n\nImplement SBOMs, signed builds, provenance checks, and reproducible-build practices.\n\nDesign secure-by-default configurations for cloud and self-hosted deployments, including authentication, IAM, secrets management, and key rotation.\n\nReview cloud infrastructure, network boundaries, access controls, and production deployment patterns.\n\nIT security and incident response\nStrengthen employee identity, device, SaaS, and internal access controls.\n\nBuild monitoring and anomaly detection for suspicious API, model, authentication, and routing activity.\n\nLead security incident response, vulnerability assessment, remediation, post-mortems, and stakeholder communication.\n\nEstablish formal vulnerability intake, CVE triage, disclosure, and remediation processes.\n\nMaintain threat models as LiteLLM’s product and architecture evolve.\n\nWhat we’re looking for\nA strong security generalist who can work across application security, IT, CI/CD, cloud infrastructure, and the software supply chain.\n\nDeep application-security expertise, including manually auditing production Python code and working with engineers to remediate vulnerabilities.\n\nStrong understanding of authentication, authorization, tenant isolation, SSRF, injection, deserialization, secrets management, and common web and API vulnerabilities.\n\nExperience using and configuring tools such as Semgrep, Bandit, CodeQL, Burp Suite, and other SAST or DAST tooling.\n\nPrevious experience at an early-stage security startup during its 0→1 journey.\n\nExperience securing containers, GitHub Actions, build pipelines, packages, and software dependencies.\n\nFamiliarity with SBOMs, Sigstore, Cosign, Snyk, Grype, Trivy, or equivalent tooling.\n\nStrong knowledge of OAuth2, JWT, mTLS, IAM, and high-throughput API authentication.\n\nFamiliarity with prompt injection, LLM data exfiltration, tool abuse, and the OWASP Top 10 for LLM Applications.\n\nExperience with incident response, CVSS scoring, vulnerability management, CVE triage, and coordinated disclosure.\n\nExperience competing in CTFs during college or independently pursuing vulnerability research, reverse engineering, bug bounties, or security projects.\n\nA genuine interest in security outside your day job-you regularly explore new attack techniques, build security projects, or contribute to the security community.\n\nBachelor’s or Master’s degree in Computer Science or a related field, or equivalent practical experience.\n\nWhy join LiteLLM?\nWork on application-security problems at the intersection of AI, APIs, and developer infrastructure.\n\nSecure an open-source product used by enterprises around the world.\n\nWork directly with engineers and influence how security is incorporated into product development.\n\nTake broad technical ownership in a fast-moving environment.\n\nCompetitive salary and health, dental, and vision benefits.\n\nAbout LiteLLM\nLiteLLM is a Python SDK and Proxy Server that enables seamless access to more than 100 LLM APIs through the OpenAI format.\nReady to secure the infrastructure powering enterprise AI? Apply now.","description_format":"text","description_chars":5186,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["LLM & Generative AI","AI Compute & Inference","AI Development Tools"],"lifecycle":[{"event":"open","at":"2026-07-25T21:49:08Z"},{"event":"close","at":"2026-08-21T11:08:55Z"},{"event":"reopen","at":"2026-10-31T02:47:43Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.59,"p_room":0.28,"age_days":98,"expected_fill_days":46,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":260000,"is_top_pay":true},"html_url":"https://alion.io/job/litellm-senior-security-engineer","json_url":"https://alion.io/job/litellm-senior-security-engineer.json","meta":{"generated_at":"2026-11-02T05:58:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8516,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20631},"rest":"https://alion.io/mcp/rest/get_company?id=20631"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flitellm-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flitellm-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flitellm-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/litellm-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flitellm-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":62212}},{"tool":"search_jobs","arguments":{"company":"litellm.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":62212},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}