Lambda
Senior Product Security Engineer
San Francisco Office (Second St), Remote. Posted 9 days ago
The role
You will own security design reviews and threat models for Lambda's systems. You will secure multi-tenant infrastructure, find and fix vulnerabilities in code, and build security tooling using Python or Go.
What you will do
- Own security design reviews and threat models
- Harden network, cluster, and infrastructure-service layers
- Review application code and infrastructure as code to find and fix vulnerabilities
- Run vulnerability management as a program
- Develop security patterns and requirements
- Partner with GRC on customer security reviews
- Build security tooling in Python or Go
- Partner across Product Engineering, Data Center Operations, and Detection & Response
- Coach engineers and mentor newer security team members
- Balance strategic and tactical work
Required qualifications
- 5+ years of demonstrated security engineering experience, or as a software, infrastructure, or site reliability engineer driving security outcomes
- Demonstrated depth in infrastructure security or application security
- Track record of independently owning security work end to end
- Ability to thrive in high-speed, high-ambiguity startup environments
- Strong hands-on Linux experience in both bare metal and cloud environments
- Ability to read application code and infrastructure as code fluently
- Ability to ship production-grade tooling in Python, Go, or a similar language
- Ability to translate security risk into business impact
- Excellent collaboration with technical teams
Nice to have
- Deep code analysis expertise, such as source code auditing, fuzzing, reverse engineering, or vulnerability research with published findings or CVEs
- Experience securing multi-tenant infrastructure: network segmentation, virtualization or container isolation, Kubernetes, or hardware root of trust and secure boot
- Led the security assessment and requirements for a major platform component or enterprise system
- Experience building infrastructure-as-code security guardrails
- Run vulnerability management as a program with risk-based prioritization and remediation SLAs
- Experience supporting enterprise customer security reviews or providing evidence for compliance audits such as SOC 2, ISO 27001, or FedRAMP
- Experience with AI/ML infrastructure security, model security, or protecting high-value computational workloads
- Significant experience operating large-scale production services or with virtualization at scale
- Enthusiasm about leveraging LLMs, frontier models, and AI tools for security
Benefits
- Generous cash & equity compensation
- Health, dental, and vision coverage for you and your dependents
- Wellness and commuter stipends for select roles
- 401k Plan with 2% company match (USA employees)
- Flexible paid time off plan
About the company
Lambda is a leader in AI cloud infrastructure serving tens of thousands of customers. Founded in 2012, it has 500+ employees and is growing fast.