Senior Product Security Engineer – Hybrid (AI Cloud)

Lambda; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health, dental, and vision coverage

401k plan with company match

Flexible paid time off

Job summary

Lambda is seeking a Senior Security Engineer on Product Security to own security outcomes across infrastructure and code, partnering with Product Engineering and Operations. This role involves threat modeling, vulnerability management, and building secure tooling.

You bring 5+ years in security engineering, strong Linux, IaC, and experience with review processes. The position requires in-office presence in SF or Bellevue four days a week, with Tuesday as the work-from-home day.

Qualifications

• 5+ years of security engineering experience or equivalent
• Demonstrated depth in infrastructure or application security
• Proven ability to own security work end-to-end
• Comfort in high-speed startup environments
• Strong Linux experience in bare metal and cloud environments
• Ability to read application code and IaC (Terraform, Ansible, Kubernetes)

Responsibilities

• Own security design reviews and threat models for your systems
• Harden multi-tenant infrastructure to isolate workloads
• Review code and IaC to find vulnerabilities and land fixes
• Drive vulnerability management as a program with SLA alignment
• Develop security patterns and guardrails adopted by teams
• Support enterprise deals with customer security reviews
• Build tooling (Python/Go) for security review and triage
• Collaborate with Product Engineering and Operations teams
• Mentor engineers to build secure design practices
• Balance long-term fixes with practical, incremental improvements

Skills

Security engineering

Threat modeling

Vulnerability management

Linux proficiency

Security automation

Tools

Terraform

Ansible

Kubernetes manifests

Python

Job description

Lambda is seeking a Senior Security Engineer on Product Security to own security outcomes across infrastructure and code, partnering with Product Engineering and Operations. This role involves threat modeling, vulnerability management, and building secure tooling.

You bring 5+ years in security engineering, strong Linux, IaC, and experience with review processes. The position requires in-office presence in SF or Bellevue four days a week, with Tuesday as the work-from-home day.