6 days ago
Base Salary
$266k - $395k/yr
Responsibilities
- Design, build, and maintain detection rules, signatures, and behavioral analytics across cloud, bare-metal, and internal infrastructure.
- Conduct proactive threat hunting for hidden threat actors, novel attack vectors, and zero-day vulnerabilities across multi-cloud and AI workloads.
- Develop detection logic, security playbooks, automation tools, and incident-response pipelines as code.
- Build AI-powered detection and investigation workflows using Lambda’s internal LLM infrastructure.
- Lead technical incident-response investigations, forensic analysis, root-cause identification, and containment for complex security events.
- Architect SOAR capabilities to isolate compromised assets and revoke compromised credentials programmatically.
- Partner with Platform and Infrastructure engineering teams to harden systems and improve security instrumentation and telemetry coverage.
- Participate in an engineering on-call rotation, conduct post-incident reviews, and mentor junior and mid-level security engineers.
Requirements
- At least 5 years of hands-on security engineering experience specializing in detection engineering, threat hunting, or digital forensics and incident response.
- Strong programming or scripting proficiency in languages such as Python, Go, Rust, or Bash, with experience building automated security tools and pipelines.
- Deep technical knowledge of cloud infrastructure security, including AWS or GCP, Linux system internals, container runtime security, and network telemetry.
- Understanding of the security requirements of a cloud infrastructure provider.
- Experience writing and managing detection rules using SIEM, YARA, Sigma, Falco, or EDR queries through software development best practices.
- Hands-on experience conducting forensic investigations and triaging complex, multi-stage attacks across cloud environments.
- Strong technical communication skills for documenting vulnerabilities, incident post-mortems, and architectural designs.
- Ability to operate effectively in high-ambiguity, fast-paced startup environments.
- Preferred experience building detection and response programs at AI/ML companies, using AI/ML for security operations automation, or scaling security during hypergrowth.
- Preferred experience with eBPF, kernel-level telemetry, specialized bare-metal host security tools, security tooling build-versus-buy decisions, or compliance audits involving SOC 2, ISO 27001, PCI-DSS, HIPAA/HITECH, or FedRAMP.
Benefits
- The position requires working from the Bellevue, San Francisco, or San Jose office 4 days per week, with Tuesday designated as the work-from-home day.
- Generous cash and equity compensation are offered, with the cash amount not specified in the posting.
- Health, dental, and vision coverage are provided for employees and dependents.
- Wellness and commuter stipends are available for select roles.
- USA employees receive a 401(k) plan with a 2% company match.
- Flexible paid time off is provided.
About Lambda
Lambda provides GPU cloud computing and on-prem AI hardware—servers, clusters, and workstations—for teams training and serving large ML models. Its products include NVIDIA H100/A100 instances, managed clusters, and the Lambda Stack software, sold via usage-based cloud pricing and hardware sales. Founded in 2012 and headquartered in San Francisco, the privately held company serves researchers, startups, enterprises, and hyperscalers.