1 day ago
Base Salary
$266k - $395k/yr
Responsibilities
- Own security design reviews and threat models for systems in the assigned area.
- Harden network, cluster, and infrastructure-service layers to maintain customer workload isolation.
- Review application code and infrastructure as code, identify vulnerabilities, and implement fixes with owning engineering teams.
- Operate vulnerability management as a risk-driven program and drive remediation to service-level agreements.
- Develop security requirements, reference patterns, and secure-by-default guardrails.
- Support enterprise customer security reviews and architecture discussions with technically grounded security information.
- Build production-grade security tooling and automation in Python or Go using Lambda-hosted LLMs, frontier models, and AI tools.
- Partner with Product Engineering, Data Center Operations and Engineering, Detection & Response, GRC, and Technical Program Managers.
- Respond to bug bounty and vulnerability disclosure reports and mentor engineers and newer security team members.
Requirements
- At least 5 years of demonstrated security engineering experience, or equivalent software, infrastructure, or site reliability engineering experience driving security outcomes.
- Demonstrated depth in infrastructure security or application security, including adopted design reviews, threat models, or vulnerability fixes.
- Experience independently owning security work end to end and making sound escalation decisions.
- Strong hands-on Linux experience in bare-metal and cloud environments, from kernel through application layers.
- Fluency reading application code and infrastructure as code such as Terraform, Ansible, and Kubernetes manifests.
- Experience shipping production-grade tooling in Python, Go, or a similar language.
- Ability to translate security risk into business impact for engineers, leadership, and customers.
- Strong collaboration skills with technical teams, including work performed without direct authority.
- Preferred experience with source-code auditing, fuzzing, reverse engineering, vulnerability research, or published CVEs.
- Preferred experience securing multi-tenant infrastructure, network segmentation, virtualization, container isolation, Kubernetes, hardware roots of trust, or secure boot.
- Preferred experience leading security assessments and requirements for major platform components or enterprise systems.
- Preferred experience building infrastructure-as-code security guardrails and running vulnerability management with risk-based prioritization and remediation SLAs.
- Preferred experience supporting enterprise security reviews or compliance audits such as SOC 2, ISO 27001, or FedRAMP.
- Preferred experience with AI/ML infrastructure security, model security, large-scale production services, or virtualization at scale.
Benefits
- The role requires working from the San Francisco or Bellevue office 4 days per week, with Tuesday designated as the work-from-home day.
- Generous cash and equity compensation are offered, with the specific salary range not stated in the posting.
- Health, dental, and vision coverage are provided for employees and dependents.
- Wellness and commuter stipends are available for select roles.
- A 401(k) plan with a 2% company match is available to USA employees.
- Flexible paid time off is offered.
About Lambda
Lambda provides GPU cloud computing and on-prem AI hardware—servers, clusters, and workstations—for teams training and serving large ML models. Its products include NVIDIA H100/A100 instances, managed clusters, and the Lambda Stack software, sold via usage-based cloud pricing and hardware sales. Founded in 2012 and headquartered in San Francisco, the privately held company serves researchers, startups, enterprises, and hyperscalers.