Senior Product Security Engineer (AI)

Location: Hybrid; presence required in the San Francisco or Bellevue office 4 days per week, with Tuesday designated as the work-from-home day. United States.

Annual salary: San Francisco $296K–$395K; Bellevue $266K–$356K.

Company

Lambda builds AI cloud infrastructure for AI researchers, enterprises, and hyperscalers, securing training data, model weights, customer workloads, and AI model infrastructure.

What you will do

• Own security design reviews and threat models for Lambda systems and deliver actionable recommendations.
• Harden network, cluster, and infrastructure-service layers to isolate multi-tenant customer workloads.
• Review application code and infrastructure as code, identify vulnerabilities through analysis and testing, and drive fixes.
• Run risk-based vulnerability management, prioritize findings, and drive remediation to SLA.
• Develop security requirements, reference patterns, guardrails, and Python or Go automation using Lambda-hosted LLMs and AI tools.
• Partner with Product Engineering, Data Center Operations and Engineering, Detection & Response, GRC, and customers; support security reviews, vulnerability disclosure, bug bounty work, and engineer mentoring.

Requirements

• 5+ years of demonstrated security engineering experience, either as a security engineer or as a software, infrastructure, or site reliability engineer driving security outcomes; equivalent formal security training with strong engineering experience is also accepted.
• Demonstrated depth in infrastructure security or application security, including design reviews, threat models, or fixes adopted by engineering teams.
• Ability to independently own security work end to end, make sound decisions, and know when to escalate.
• Experience in high-speed, high-ambiguity startup environments where priorities shift and structure must be built while executing.
• Strong hands-on Linux experience in bare-metal and cloud environments, from kernel to application layer.
• Fluent enough with application code and infrastructure as code, including Terraform, Ansible, and Kubernetes manifests, to explain vulnerability root causes.
• Ability to ship production-grade tooling in Python, Go, or a similar language.
• Ability to translate security risk into business impact for engineers, leadership, and customers.
• Excellent collaboration with technical teams both with and without authority.

Nice to have

• Deep code analysis expertise, including source auditing, fuzzing, reverse engineering, or vulnerability research with published findings or CVEs.
• Experience securing multi-tenant infrastructure through network segmentation, virtualization or container isolation, Kubernetes, hardware root of trust, or secure boot.
• Leadership of security assessment and requirements for a major platform component or enterprise system.
• Experience building infrastructure-as-code security guardrails, policy-as-code checks in CI/CD, or secure-by-default modules.
• Experience running vulnerability management with risk-based prioritization and remediation SLAs.
• Experience supporting enterprise customer security reviews or compliance audits such as SOC 2, ISO 27001, or FedRAMP.
• Experience with AI/ML infrastructure security, model security, or protection of high-value computational workloads.
• Experience operating large-scale production services or virtualization at scale, including KVM, Hyper-V, or Xen.
• Experience using LLMs, frontier models, and AI tools for code review, threat modeling, or vulnerability triage.

Culture & Benefits

• Fast-growing AI infrastructure company founded in 2012 with 500+ employees.
• Generous cash and equity compensation.
• Health, dental, and vision coverage for employees and dependents.
• Wellness and commuter stipends for select roles.
• 401(k) plan with a 2% company match for USA employees and flexible paid time off.