Senior Product Security Engineer - Secure AI Infrastructure

ContentBuffer; San Francisco (CA); Hybrid; USD 170,000 - 250,000; Full time

Benefits offered by this job

Health, dental, vision coverage

Equity compensation

401k plan with company match

Flexible paid time off

Wellness and commuter stipends

Job summary

Lambda is seeking a Senior Security Engineer for Product Security in San Francisco or Bellevue, with 5+ years of security engineering experience. You will threat-model, review designs, and harden network, cluster, and application layers while enabling enterprise deals and security reviews with cross-functional teams.

You'll own vulnerability management, build security patterns, and ship tooling using Python or Go, including AI-assisted reviews.

Qualifications

• 5+ years of demonstrated security engineering experience, either directly as a security engineer or as a software/infrastructure/site reliability engineer driving security outcomes.
• Demonstrated depth in infrastructure security or application security with design reviews, threat models, or fixes adopted by engineering teams.
• Proven track record of independently owning security work end to end, with sound decisions and escalation when needed.
• Thrives in high-speed startup environments where priorities shift and structure is built while delivering results.
• Strong Linux experience in both bare metal and cloud environments, from kernel to application layer.
• Fluency in reading application code and infrastructure as code to explain root causes, not just scanner results.
• Experience shipping production-grade tooling in Python or Go.
• Ability to translate security risk into business impact for engineers, leadership, and customers.

Responsibilities

• Review designs and threat models for systems in your area, delivering actionable recommendations.
• Harden multi-tenant infrastructure to keep workloads isolated.
• Identify and fix vulnerabilities in code and IaC, coordinating with owning teams.
• Run vulnerability management as a program, turning scans into prioritized remediation.
• Develop security patterns and guardrails adopted by default by teams.
• Collaborate with GRC on enterprise security reviews and architecture discussions.
• Build security tooling in Python or Go using Lambda-hosted LLMs and AI tools.
• Partner across engineering to coordinate bug bounty and vulnerability disclosures.
• Coach engineers to build secure design instincts and mentor junior security staff.
• Balance long-term fixes with practical, measurable progress.

Skills

Security engineering

Linux systems

Threat modeling

Security design reviews

Vulnerability management

Collaboration

Tools

Terraform

Kubernetes

Python

Go

Job description

Lambda is seeking a Senior Security Engineer for Product Security in San Francisco or Bellevue, with 5+ years of security engineering experience. You will threat-model, review designs, and harden network, cluster, and application layers while enabling enterprise deals and security reviews with cross-functional teams.

You'll own vulnerability management, build security patterns, and ship tooling using Python or Go, including AI-assisted reviews.