LiteLLM is the open-source AI gateway that puts your full AI stack behind one OpenAI-compatible key. Track and cap LLM spend, route to the right model, and self-host anywhere — even air-gapped. 140+ providers, 1,892 models. Backed by Y Combinator.
About the role
This is a hands-on security generalist role with a strong emphasis on application security. You’ll spend most of your time reviewing and hardening LiteLLM’s Python codebase, identifying new attack surfaces, working directly with engineers to fix vulnerabilities, and making secure development practices part of how we build. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- A strong security generalist who can work across application security, IT, CI/CD, cloud infrastructure, and the software supply chain
- Deep application-security expertise, including manually auditing production Python code and working with engineers to remediate vulnerabilities
- Strong understanding of authentication, authorization, tenant isolation, SSRF, injection, deserialization, secrets management, and common web and API vulnerabilities
- Experience using and configuring tools such as Semgrep, Bandit, CodeQL, Burp Suite, and other SAST or DAST tooling
- Previous experience at an early-stage security startup during its 0→1 journey
- Experience securing containers, GitHub Actions, build pipelines, packages, and software dependencies
More about this role
LiteLLM is the world’s most popular AI Gateway, trusted by companies like Adobe, Netflix, and NASA. Our platform gives developers secure, reliable access to LLMs and adjacent services. We’re looking for our first Security Engineer to help secure LiteLLM’s application, infrastructure, and software-delivery pipeline.
This is a hands-on security generalist role with a strong emphasis on application security. You’ll spend most of your time reviewing and hardening LiteLLM’s Python codebase, identifying new attack surfaces, working directly with engineers to fix vulnerabilities, and making secure development practices part of how we build.
You’ll also own security work across IT, CI/CD, cloud infrastructure, and the software supply chain. The ideal candidate has built application/product/infrastructure security programs from scratch and genuinely enjoys security outside of work—through CTFs, vulnerability research, open-source projects, or independent experimentation.
Conduct deep security reviews of LiteLLM’s Python proxy, APIs, authentication systems, and enterprise features.
Identify and remediate vulnerabilities involving authentication, authorization, secrets, tenant isolation,...
Browse similar: AI jobs · AI startup jobs · Startup jobs · Remote jobs