Security Engineer
$12k - $18k • Remote • San Francisco Office (Fremont St) • FullTime
Posted 1mo ago
About the job
Lambda Security is responsible for protecting critical digital assets, including training data, model weights, and sensitive inputs for AI models. As a Security Engineer, you will contribute to various aspects of the security program, such as building detections, hardening infrastructure, reviewing designs, automating tasks, and responding to incidents. You will collaborate closely with Product Engineering, Data Center Operations, IT, and Technical Program Managers to enhance the security posture of Lambda's AI cloud infrastructure. The role involves delivering on the security roadmap, expanding detection capabilities for AI-specific threats, maturing incident response processes, and developing security automation. You will have access to LLMs hosted on Lambda's infrastructure to advance security operations.
Responsibilities
- Build and tune detection content for SIEM and EDR to identify threats targeting customer data, model weights, and infrastructure.
- Participate in on-call rotations, lead incident investigations, and develop automation, playbooks, or controls based on incident learnings.
- Remediate vulnerabilities and security findings in production environments, collaborating with engineering teams.
- Provide security feedback on high-level designs and code changes, and establish reusable security standards.
- Develop security tooling using Python or Go to automate evidence collection, vulnerability triage, and other repetitive tasks, leveraging LLMs.
- Collaborate with Product Engineering, Data Center Operations, IT, and Legal to implement security improvements efficiently.
- Balance strategic security investments with tactical solutions, focusing on measurable progress.
Requirements
- 5+ years of demonstrated security engineering experience or equivalent background with strong engineering experience and formal security training.
- Proven experience working across multiple security domains (e.g., detection, architecture, platform, vulnerability management) with a willingness to learn.
- Ability to thrive in a fast-paced, ambiguous startup environment with shifting priorities.
- Strong hands-on Linux experience for protecting applications and cloud infrastructure.
- Proficiency in Python, Go, or a similar language for developing production-grade tooling.
- Excellent collaboration skills with technical teams, both with and without direct authority.