About the role
We are looking for a Senior Security Engineer with 3–10 years of experience to be the first dedicated security hire and build the security program from the ground up. You'll own threat modeling, identify how the platform could be attacked, and drive resolution of critical vulnerabilities across the application, CI/CD, and infrastructure layers. This is a hands-on IC role – you'll be writing code, auditing the Python codebase, and hardening the proxy and API authentication systems daily. The ideal candidate has previously built an AppSec program from scratch at an early-stage startup and genuinely lives and breathes security outside of work.
What you will be doing
- Conducting threat modeling to identify how LiteLLM could be attacked and proactively preventing those attacks
- Performing deep security reviews and hardening of the Python proxy, APIs, and authentication systems
- Building the security program end-to-end – standing up processes, tooling, and secure development practices across application and CI/CD layers
- Driving resolution of critical vulnerabilities by partnering directly with engineers to fix issues, not just find them
- Owning security across IT, cloud infrastructure, and the software supply chain as the sole security engineer
