Design and maintain detection rules, signatures, behavioral analytics, and threat-hunting capabilities across cloud, bare-metal, and internal infrastructure.
Develop detection logic, security playbooks, response automation, and orchestration pipelines as code.
Lead technical incident response investigations, forensic analysis, root-cause identification, containment, and remediation.
Build AI-powered detection and investigation workflows using Lambda’s internal LLM infrastructure.
Partner with Platform and Infrastructure engineering teams to harden systems and improve security instrumentation and telemetry coverage.
Participate in an engineering on-call rotation supporting 24/7 operational readiness and rapid incident containment.
Conduct post-incident reviews and mentor junior and mid-level security engineers.
Requirements
5+ years of hands-on security engineering experience specializing in detection engineering, threat hunting, or digital forensics and incident response.
Strong programming or scripting proficiency in languages such as Python, Go, Rust, or Bash, with experience building automated security tools and pipelines.
Deep knowledge of cloud infrastructure security, Linux system internals, container runtime security, and network telemetry, including AWS or GCP environments.
Experience writing and managing detections using SIEM, YARA, Sigma, Falco, or EDR queries.
Hands-on experience conducting forensic investigations and triaging complex, multi-stage attacks across cloud environments.
Strong technical communication skills for documenting vulnerabilities, incident post-mortems, and architectural designs.
Preferred experience includes building detection and response programs at AI/ML companies, using AI/ML for security automation, scaling security during hypergrowth, and working with eBPF, kernel-level telemetry, or bare-metal host security tools.
Preferred experience also includes security tooling build-versus-buy decisions and supporting compliance audits such as SOC 2, ISO 27001, PCI-DSS, HIPAA/HITECH, or FedRAMP.
Benefits
The role requires working from Lambda’s Bellevue, San Francisco, or San Jose office four days per week, with Tuesday designated as the work-from-home day.
Lambda offers cash and equity compensation, health, dental, and vision coverage, wellness and commuter stipends for select roles, a 401(k) plan with a 2% company match for USA employees, and flexible paid time off.