LiteLLM is the open-source AI gateway that puts your full AI stack behind one OpenAI-compatible key. Track and cap LLM spend, route to the right model, and self-host anywhere — even air-gapped. 140+ providers, 1,892 models. Backed by Y Combinator.
About the role
You’ll own what we can see and how we respond: log pipelines, detections, runbooks, alert handling, and incident coordination. This is a hands-on individual contributor role reporting to our security lead. You’ll work directly with engineering to build and operate a detection and response function suited to a small company. San Francisco is preferred. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- 5+ years of relevant experience
- Experience building a detection and response function from scratch
- Hands-on experience building and tuning SIEM detections, preferably in Splunk, and managing them as code
- Experience building log pipelines from cloud and CI systems
- Strong familiarity with GitHub, Okta, and cloud audit logs, including their limitations
- Experience leading incidents end-to-end and making containment decisions on partial information
More about this role
LiteLLM is an open-source AI Gateway that gives developers a unified interface to LLM providers. We’re looking for a Senior Security Operations / Detection Engineer to build and own detection and response across our infrastructure.
You’ll own what we can see and how we respond: log pipelines, detections, runbooks, alert handling, and incident coordination.
This is a hands-on individual contributor role reporting to our security lead. You’ll work directly with engineering to build and operate a detection and response function suited to a small company. San Francisco is preferred.
You’ll own your roadmap, build and run the tooling yourself, and lead incidents with incomplete information. Strong written communication is essential: you’ll coordinate independently with engineers, customers, and vendors across time zones.
Build and maintain security log pipelines and document coverage gaps.
Build, validate, and tune detections across cloud infrastructure, CI systems, identity providers, and internal services.
Manage detections as code, with clear documentation and ongoing maintenance.
Write and maintain a runbook for every alert.
Define severity-based alert response SLAs and own...
Browse similar: AI jobs · AI startup jobs · Startup jobs · San Francisco Bay Area