Lambda

Senior Product Security Engineer

San Francisco Office (Second St), Remote. Posted 9 days ago

The role

You will own security design reviews and threat models for Lambda's systems. You will secure multi-tenant infrastructure, find and fix vulnerabilities in code, and build security tooling using Python or Go.

What you will do

  • Own security design reviews and threat models
  • Harden network, cluster, and infrastructure-service layers
  • Review application code and infrastructure as code to find and fix vulnerabilities
  • Run vulnerability management as a program
  • Develop security patterns and requirements
  • Partner with GRC on customer security reviews
  • Build security tooling in Python or Go
  • Partner across Product Engineering, Data Center Operations, and Detection & Response
  • Coach engineers and mentor newer security team members
  • Balance strategic and tactical work

Required qualifications

  • 5+ years of demonstrated security engineering experience, or as a software, infrastructure, or site reliability engineer driving security outcomes
  • Demonstrated depth in infrastructure security or application security
  • Track record of independently owning security work end to end
  • Ability to thrive in high-speed, high-ambiguity startup environments
  • Strong hands-on Linux experience in both bare metal and cloud environments
  • Ability to read application code and infrastructure as code fluently
  • Ability to ship production-grade tooling in Python, Go, or a similar language
  • Ability to translate security risk into business impact
  • Excellent collaboration with technical teams

Nice to have

  • Deep code analysis expertise, such as source code auditing, fuzzing, reverse engineering, or vulnerability research with published findings or CVEs
  • Experience securing multi-tenant infrastructure: network segmentation, virtualization or container isolation, Kubernetes, or hardware root of trust and secure boot
  • Led the security assessment and requirements for a major platform component or enterprise system
  • Experience building infrastructure-as-code security guardrails
  • Run vulnerability management as a program with risk-based prioritization and remediation SLAs
  • Experience supporting enterprise customer security reviews or providing evidence for compliance audits such as SOC 2, ISO 27001, or FedRAMP
  • Experience with AI/ML infrastructure security, model security, or protecting high-value computational workloads
  • Significant experience operating large-scale production services or with virtualization at scale
  • Enthusiasm about leveraging LLMs, frontier models, and AI tools for security

Benefits

  • Generous cash & equity compensation
  • Health, dental, and vision coverage for you and your dependents
  • Wellness and commuter stipends for select roles
  • 401k Plan with 2% company match (USA employees)
  • Flexible paid time off plan

About the company

Lambda is a leader in AI cloud infrastructure serving tens of thousands of customers. Founded in 2012, it has 500+ employees and is growing fast.

Senior Product Security Engineer at Lambda | JobZoey