2 days ago
Base Salary
$266k - $395k/yr
Responsibilities
- Own security design reviews and threat models for systems in the assigned area.
- Harden network, cluster, and infrastructure-service layers to isolate customer workloads.
- Review application code and infrastructure as code, identify vulnerabilities, and drive fixes with engineering teams.
- Run vulnerability management using risk-based prioritization and remediation SLAs.
- Develop security requirements, reference patterns, and secure-by-default guardrails.
- Partner with GRC on enterprise customer security reviews and architecture discussions.
- Build production-grade security automation in Python or Go using LLMs, frontier models, and AI tools.
- Collaborate with Product Engineering, Data Center Operations and Engineering, Detection & Response, and vulnerability disclosure stakeholders.
- Coach engineers on secure design practices and mentor newer security team members.
Requirements
- At least 5 years of demonstrated security engineering experience, or equivalent security training combined with strong engineering experience.
- Demonstrated depth in infrastructure security or application security, including adopted design reviews, threat models, or security fixes.
- Experience independently owning security work end to end and making sound escalation decisions.
- Strong hands-on Linux experience across bare-metal and cloud environments.
- Fluency reading application code and infrastructure as code such as Terraform, Ansible, and Kubernetes manifests.
- Ability to ship production-grade tooling in Python, Go, or a similar language.
- Ability to translate security risk into business impact for engineers, leadership, and customers.
- Strong collaboration skills with technical teams across organizational boundaries.
- Preferred experience includes code analysis, fuzzing, reverse engineering, vulnerability research, multi-tenant infrastructure security, Kubernetes, hardware root of trust, secure boot, infrastructure-as-code guardrails, vulnerability management programs, enterprise security reviews, SOC 2, ISO 27001, FedRAMP, AI/ML infrastructure security, model security, large-scale production services, KVM, Hyper-V, or Xen.
Benefits
- The role requires working from the San Francisco or Bellevue office 4 days per week, with Tuesday designated as the work-from-home day.
- Generous cash and equity compensation is offered.
- Health, dental, and vision coverage are provided for employees and dependents.
- Wellness and commuter stipends are available for select roles.
- 401(k) plan with a 2% company match is available to USA employees.
- Flexible paid time off plan is offered.
About Lambda
Lambda provides GPU cloud computing and on-prem AI hardware—servers, clusters, and workstations—for teams training and serving large ML models. Its products include NVIDIA H100/A100 instances, managed clusters, and the Lambda Stack software, sold via usage-based cloud pricing and hardware sales. Founded in 2012 and headquartered in San Francisco, the privately held company serves researchers, startups, enterprises, and hyperscalers.