Jobs in Canada

Group jobs by employerSave search & get alerts

Added 8 hours ago
F
Principal Cloud Architect
Fortive
Remote, Canada
- Full-time
Lead assessment and execution of cloud migration and modernization initiatives, including legacy system re-platforming
Added 12 hours ago
L
Senior Security Engineer
LiteLLM
Canada
- Full-time
…You’ll spend most of your time reviewing and hardening LiteLLM’s Python codebase, identifying new attack surfaces, working directly with engineers to fix vulnerabilities, and making secure…
Added 15 hours ago
RB
Senior Manager, AI Engineering (.NET)
Royal Bank of Canada
Vancouver, BC · Toronto, ON
- Full-time
The Senior Manager, AI Engineering will lead a team delivering engineering solutions for –Fraud, AML, Finance, and Risk capabilities across global groups. The role combines hands-on…
Added 21 hours ago
TH
Concepteur Web
The Home Depot Canada
Toronto, ON
- Full-time
Deployment Strategy: Develop and lead the rollout strategy, including go-live plans, data migration procedures, and the cutover plan, ensuring the successful implementation of major…
Added 21 hours ago
TH
ARCHITECT TECHNOLOGY, DATA
The Home Depot Canada
Toronto, ON
- Full-time
Deployment Strategy: Develop and lead the rollout strategy, including go-live plans, data migration procedures, and the cutover plan, ensuring the successful implementation of major…
Added 23 hours ago
HD
ARCHITECT TECHNOLOGY, DATA
HOME DEPOT CANADA, INC.
Canada
- Full-time
Deployment Strategy: Develop and lead the rollout strategy, including go-live plans, data migration procedures, and the cutover plan, ensuring the successful implementation of major…
Added 1 day ago
NB
Principal Lead AI Developer
National Bank of Canada
Montreal, QC
- Full-time
A career as a Lead AI Developer within the Commercial and 1859 team at National Bank means acting as a specialist in the development of advanced technology solutions. In this role, you will…
Added 1 day ago
B
Cloud Platform Engineer-Databricks
BeachHead
Toronto, ON
- Contract
Experience serving as a senior or lead developer and subject matter expert.
Added 1 day ago
S
CAN - IT - Site Reliability Engineer IV
SPECTRAFORCE
Toronto, ON
- On-site
Readiness and motivation (as senior or lead developer and valued subject matter expert) to address and resolve highly complex and multifaceted development-related issues, often…
Added 1 day ago
RC
IT - Site Reliability Engineer IV
Randstad Canada
Toronto, ON
- $75.05 to $89.34 CAD / hour
- Contract
Work Location: Toronto, ON (Hybrid – 4 days per week on-site, 1 day remote; no travel required)
Added 1 day ago
AI
Principal Software Development Engineer
AMD, Inc.
Waterloo, ON
- Full-time
AMD is looking for a strategic software engineering lead who is passionate about improving the performance of machine learning models on AMD GPUs. You will be a member of a core team of…
Added 1 day ago
RC
Intermediate Automation Developer
Randstad Canada
Toronto, ON
- Contract
We are seeking an Intermediate Automation Developer to lead the architecture, development, and execution of automated testing and performance engineering solutions for enterprise…
Added 1 day ago
P
Senior Automation & Performance Test Engineer
Procom
Toronto, ON
- $53.25 to $71 CAD / hour
- Contract
We are seeking a Senior Automation & Performance Test Engineer to lead the design, development, and execution of automated and performance testing solutions for enterprise applications. The…

LiteLLM

Senior Security Engineer

Canada

Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Full-time
Posting language: English
Posted: Nov 15, 2026

Original job description

Listed on CyberJobs.cc, a job board for cybersecurity jobs from the team behind AITraining.jobs.

Senior Security Engineer

LiteLLM is the world’s most popular AI Gateway, trusted by companies like Adobe, Netflix, and NASA. Our platform gives developers secure, reliable access to LLMs and adjacent services. We’re looking for our first Security Engineer to help secure LiteLLM’s application, infrastructure, and software-delivery pipeline.

About The Role

This is a hands-on security generalist role with a strong emphasis on application security. You’ll spend most of your time reviewing and hardening LiteLLM’s Python codebase, identifying new attack surfaces, working directly with engineers to fix vulnerabilities, and making secure development practices part of how we build.

You’ll also own security work across IT, CI/CD, cloud infrastructure, and the software supply chain. The ideal candidate has built application/product/infrastructure security programs from scratch and genuinely enjoys security outside of work - through CTFs, vulnerability research, open-source projects, or independent experimentation.

Application security

Conduct deep security reviews of LiteLLM’s Python proxy, APIs, authentication systems, and enterprise features.
Identify and remediate vulnerabilities involving authentication, authorization, secrets, tenant isolation, injection, and data exposure.
Partner directly with engineers throughout design, implementation, code review, and release - not only after code is shipped.
Build application-security tooling into the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection.
Perform internal red teaming and adversarial testing against LiteLLM’s APIs, proxy, and LLM-specific attack surfaces.
Threat-model new products and architecture changes before they reach production.
Create secure coding guidelines and train engineers on common vulnerabilities and defensive practices.

Infrastructure, CI/CD, and supply-chain security

Harden LiteLLM’s Docker images, PyPI packages, GitHub Actions workflows, and release infrastructure.
Detect dependency confusion, poisoned packages, compromised dependencies, exposed secrets, and unsafe build practices.
Implement SBOMs, signed builds, provenance checks, and reproducible-build practices.
Design secure-by-default configurations for cloud and self-hosted deployments, including authentication, IAM, secrets management, and key rotation.
Review cloud infrastructure, network boundaries, access controls, and production deployment patterns.

IT security and incident response

Strengthen employee identity, device, SaaS, and internal access controls.
Build monitoring and anomaly detection for suspicious API, model, authentication, and routing activity.
Lead security incident response, vulnerability assessment, remediation, post-mortems, and stakeholder communication.
Establish formal vulnerability intake, CVE triage, disclosure, and remediation processes.
Maintain threat models as LiteLLM’s product and architecture evolve.

What we’re looking for

A strong security generalist who can work across application security, IT, CI/CD, cloud infrastructure, and the software supply chain.
Deep application-security expertise, including manually auditing production Python code and working with engineers to remediate vulnerabilities.
Strong understanding of authentication, authorization, tenant isolation, SSRF, injection, deserialization, secrets management, and common web and API vulnerabilities.
Experience using and configuring tools such as Semgrep, Bandit, CodeQL, Burp Suite, and other SAST or DAST tooling.
Previous experience at an early-stage security startup during its 0→1 journey.
Experience securing containers, GitHub Actions, build pipelines, packages, and software dependencies.
Familiarity with SBOMs, Sigstore, Cosign, Snyk, Grype, Trivy, or equivalent tooling.
Strong knowledge of OAuth2, JWT, mTLS, IAM, and high-throughput API authentication.
Familiarity with prompt injection, LLM data exfiltration, tool abuse, and the OWASP Top 10 for LLM Applications.
Experience with incident response, CVSS scoring, vulnerability management, CVE triage, and coordinated disclosure.
Experience competing in CTFs during college or independently pursuing vulnerability research, reverse engineering, bug bounties, or security projects.
A genuine interest in security outside your day job - you regularly explore new attack techniques, build security projects, or contribute to the security community.
Bachelor’s or Master’s degree in Computer Science or a related field, or equivalent practical experience.

Why join LiteLLM?

Work on application-security problems at the intersection of AI, APIs, and developer infrastructure.
Secure an open-source product used by enterprises around the world.
Work directly with engineers and influence how security is incorporated into product development.
Take broad technical ownership in a fast-moving environment.
Competitive salary and health, dental, and vision benefits.

About LiteLLM

LiteLLM is a Python SDK and Proxy Server that enables seamless access to more than 100 LLM APIs through the OpenAI format.

Ready to secure the infrastructure powering enterprise AI? Apply now.

Apply on LinkedIn About employer

More about this job

Responsibilities

Review and secure LiteLLM’s Python application, APIs, authentication systems, infrastructure, CI/CD pipelines, and software supply chain; identify and remediate vulnerabilities in partnership with engineers. Establish security tooling and practices, conduct threat modeling and adversarial testing, strengthen monitoring and access controls, and lead vulnerability management and incident response.

Requirements

Candidates should have deep application-security expertise, including manual audits of production Python code, and experience securing cloud infrastructure, containers, CI/CD, and software dependencies. The role also calls for knowledge of web and API vulnerabilities, authentication standards, LLM-specific threats, incident response, and vulnerability research; a bachelor’s or master’s degree or equivalent practical experience is requested.

Skills

Application Security
Python
Security Code Review
Authentication and Authorization
Threat Modeling
Vulnerability Management
Incident Response
Cloud Security
CI/CD Security
Software Supply-Chain Security
Container Security
SAST and DAST
OAuth2 and JWT
IAM
LLM Security
Red Teaming

Benefits

Health Benefits
Dental Benefits
Vision Benefits

Visa sponsorship

Not detected in the job text

Keywords

Python
LiteLLM
Application Security
API Security
SAST
DAST
Semgrep
Bandit
CodeQL
Burp Suite
Docker
GitHub Actions
SBOM
Sigstore
Cosign
Snyk
Grype
Trivy
OAuth2
JWT
mTLS
IAM
Prompt Injection
OWASP Top 10 for LLM Applications
Threat Modeling
Red Teaming
Incident Response
CVSS
CVE Triage
Software Supply-Chain Security

Report this job

Work requirements

Jobs in Canada