Senior AI Security Engineer - Detection & Response

Lambda; San Francisco (CA); Hybrid; USD 180,000 - 250,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision coverage

401k Plan with 2% company match (USA)

Wellness stipend

Commuter stipend

Job summary

Lambda Security is hiring a hands-on security engineer to design and implement robust detection and response capabilities across cloud and bare-metal environments. You will drive threat hunting, incident response, and automation using AI-powered workflows, with on-call rotations to ensure 24/7 readiness.

As part of the Detection & Response team, you will mentor junior engineers, develop automated playbooks, and collaborate with Platform and Infrastructure teams to harden systems and expand

Qualifications

• 5+ years of hands-on security engineering experience specializing in detection engineering, threat hunting, or digital forensics and incident response (DFIR).
• Strong programming/scripting proficiency (e.g., Python, Go, Rust, or Bash) with a track record of building automated security tools and pipelines
• Deep technical knowledge of cloud infrastructure security (AWS/GCP), Linux system internals, container runtime security, and network telemetry
• Clear understanding of the unique requirements of securing a cloud infrastructure provider
• Proven experience writing detection rules (SIEM, YARA, Sigma, Falco, or EDR queries) and managing detections through software development best practices
• Hands-on experience conducting forensic investigations and triaging complex, multi-stage attacks across cloud environments
• Strong technical communication skills with the ability to document complex vulnerabilities, incident post-mortems, and architectural designs clearly
• Thrives in high-ambiguity environments where you must build structure while executing at startup pace

Responsibilities

• Design, build, and maintain detection rules, signatures, and analytics across Lambda's cloud, bare-metal, and internal infrastructure
• Conduct proactive threat hunting operations to uncover hidden threat actors, novel attack vectors, and zero-day vulnerabilities across multi-cloud and AI workloads
• Develop custom detection logic and playbooks as code, eliminating manual triage toil and reducing time-to-detect and time-to-respond
• Pioneer AI-powered detection and investigation workflows leveraging our internal LLM infrastructure to automate log analysis and threat intelligence context
• Lead technical incident response investigations for complex security events, performing deep-dive forensic analysis, root-cause identification, and containment
• Architect automated response capabilities and orchestration pipelines (SOAR) to programmatically isolate compromised assets and revoke compromised credentials
• Partner with Platform and Infrastructure engineering teams to harden systems, build security instrumentation, and ensure telemetry coverage across all services
• Participate in an engineering on-call rotation to maintain 24/7 operational readiness and rapid incident containment
• Conduct post-incident reviews to extract technical learnings, drive root-cause remediation, and prevent recurring incidents
• Mentor junior and mid-level security engineers, sharing technical domain expertise and promoting best practices in detection engineering and automation

Skills

Security engineering

Threat hunting

Digital forensics

Python

Go

Rust

Bash

Cloud security (AWS/GCP)

SIEM rules

Tools

AWS

GCP

Linux

Container security

Network telemetry

Job description

Lambda Security is hiring a hands-on security engineer to design and implement robust detection and response capabilities across cloud and bare-metal environments. You will drive threat hunting, incident response, and automation using AI-powered workflows, with on-call rotations to ensure 24/7 readiness.

As part of the Detection & Response team, you will mentor junior engineers, develop automated playbooks, and collaborate with Platform and Infrastructure teams to harden systems and expand