Security Engineer - Detection & Response

We're here to help the smartest minds on the planet build Superintelligence. The labs pushing the edge? They run on Lambda. Our gear trains and serves their models, our infrastructure scales with them, and we move fast to keep up. If you want to work on massive, world-changing AI deployments with people who love action and hard problems, we're the place to be.

If you'd like to build the world's best deep learning cloud, join us. 

*Note: This position requires presence in our San Francisco office location 4 days per week; Lambda’s designated work from home day is currently Tuesday.

About the Role

Lambda Security protects some of the world's most valuable digital assets: invaluable training data, model weights representing immense computational investments, and the sensitive inputs required to leverage best of breed AI models. We're responsible for securing every byte that powers breakthrough artificial intelligence.

As a Security Engineer on the Detection & Response team, you'll be a core technical contributor building detection capabilities, driving incident response, and eliminating firefighting everywhere possible.

Reporting to the Senior Manager of Detection & Response and working within our specialized Detection & Response team, you'll build and operate detection systems, lead incident investigations, develop threat intelligence capabilities, and contribute to red team activities. You'll coordinate closely with Security Technical Program Management to drive prioritized security remediations across the organization, ensuring that critical threats are addressed systematically rather than reactively.

You will work on implementing enterprise-grade detection capabilities, automating incident response workflows, developing threat hunting programs, and building tooling that enables 24/7 security operations. You'll have unique access to LLMs hosted on our own infrastructure to implement and experiment with AI-powered detection and response capabilities that wouldn't be possible anywhere else.

If you thrive on hunting threats, responding to incidents, and building detection systems that protect cutting-edge AI infrastructure at scale, we'd love to talk.

We value diverse backgrounds, experiences, and skills, and we are excited to hear from candidates who can bring unique perspectives to our team. If you do not exactly meet this description but believe you may be a good fit, please still apply and help us understand your readiness for this role. Your application is not a waste of our time.

What You’ll Do

Incident Response & Operations:

• Response: Qualify reports and lead response activities from initial triage through remediation and retrospective.

• Automation: Develop tools and workflows that accelerate incident response and reduce mean time to resolution.

• Coordination: Drive prioritization and remediation of security findings across engineering teams in coordination with Security Technical Program Management.

• 24/7 Operations: Participate in on-call rotation, ensuring rapid response to security events that threaten customer data or operations.

Threat Detection & Analysis:

• Detection Engineering: Create and tune detection rules and alerts that identify threats across Lambda's infrastructure before they impact customers or revenue.

• Threat Intelligence: Research and operationalize threat intelligence specific to AI infrastructure and Lambda's unique threat landscape.

• Threat Hunts: Proactively search for indicators of compromise and suspicious activity that automated detection might miss.

• Explore AI-driven Security: Leverage Lambda's hosted LLMs to create AI-powered threat detection, automated triage, and intelligent alert correlation.

• Offensive Security: Support periodic tabletop exercises and red team activities to test and improve detection coverage and response capabilities.

What We Think a Candidate Needs to Demonstrate to Succeed

• Have 3+ years of hands-on security engineering experience and 5+ years of total engineering experience, with demonstrated impact in detection and incident response.

• Thrive in high-speed, high-ambiguity startup environments where you build security capabilities while responding to immediate threats.

• Deep technical expertise with security tooling including SIEM/SOAR platforms, EDR solutions, vulnerability scanners, and cloud security monitoring.

• Excel at solving problems in Python, Go, or similar languages, building autom