Senior Security Engineer - Detection & Response at Lambda | CA, US | Rezi

Senior Security Engineer - Detection & Response at Lambda

Senior Security Engineer - Detection & Response

Lambda · CA, US

4 days ago

Senior Security Engineer - Detection & Response

Lambda · CA, US

4 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Senior Security Engineer - Detection & Response role.

Rezi rewrites your resume against Lambda's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Security Engineer - Detection & Response posting at Lambda — free, in seconds.

About the Role

Lambda Security protects valuable digital assets including training data, model weights, and sensitive inputs for AI models. As a hands-on technical expert on the Detection & Response team, you will ensure Lambda is the safest place to build with AI by catching security issues in real-time while enabling hypergrowth velocity. Your focus will be on automation, threat hunting, detection engineering, and incident response capability building, transforming reactive security operations into a proactive threat management engine. You will implement enterprise-grade detection capabilities, automate incident response workflows, and harden infrastructure. You will pioneer AI-powered security solutions using internal LLMs, maintaining 24/7 operational resilience through automation, rapid incident investigation, and advancing D&R capabilities.

Responsibilities

  • Design, build, and maintain robust detection rules, signatures, and behavioral analytics across Lambda's cloud, bare-metal, and internal infrastructure
  • Conduct proactive threat hunting operations to uncover hidden threat actors, novel attack vectors, and zero-day vulnerabilities across multi-cloud and AI workloads
  • Develop custom detection logic and playbooks as code, eliminating manual triage toil and reducing time-to-detect and time-to-respond
  • Pioneer AI-powered detection and investigation workflows leveraging internal LLM infrastructure to automate log analysis and threat intelligence context
  • Lead technical incident response investigations for complex security events, performing deep-dive forensic analysis, root-cause identification, and containment
  • Architect automated response capabilities and orchestration pipelines (SOAR) to programmatically isolate compromised assets and revoke compromised credentials
  • Partner with Platform and Infrastructure engineering teams to harden systems, build security instrumentation, and ensure telemetry coverage across all services
  • Participate in an engineering on-call rotation to maintain 24/7 operational readiness and rapid incident containment
  • Conduct post-incident reviews to extract technical learnings, drive root-cause remediation, and prevent recurring incidents
  • Mentor junior and mid-level security engineers, sharing technical domain expertise and promoting best practices in detection engineering and automation

Requirements

  • 5+ years of hands-on security engineering experience specializing in detection engineering, threat hunting, or digital forensics and incident response (DFIR)
  • Strong programming/scripting proficiency (e.g., Python, Go, Rust, or Bash) with a track record of building automated security tools and pipelines
  • Deep technical knowledge of cloud infrastructure security (AWS/GCP), Linux system internals, container runtime security, and network telemetry
  • Clear understanding of the unique requirements of securing a cloud infrastructure provider
  • Proven experience writing detection rules (SIEM, YARA, Sigma, Falco, or EDR queries) and managing detections through software development best practices
  • Hands-on experience conducting forensic investigations and triaging complex, multi-stage attacks across cloud environments
  • Strong technical communication skills with the ability to document complex vulnerabilities, incident post-mortems, and architectural designs clearly
  • Thrives in high-ambiguity environments where you must build structure while executing at startup pace

Skills

  • Python
  • Go
  • Rust
  • Bash
  • AWS
  • GCP
  • Linux system internals
  • Container runtime security
  • Network telemetry
  • SIEM
  • YARA
  • Sigma
  • Falco
  • EDR queries
  • Forensic investigations
  • SOAR

Location

  • Bellevue
  • San Francisco
  • San Jose

Work Type

  • Hybrid

Experience Level

  • 5+ years

Salary/Compensations

  • Salary range for this position has been set based on market data and other factors. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description.

Benefits

  • Generous cash & equity compensation
  • Health, dental, and vision coverage for you and your dependents
  • Wellness and commuter stipends for select roles
  • 401k Plan with 2% company match (USA employees)
  • Flexible paid time off plan that we all actually use

About the Company

  • Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers, ranging from AI researchers to enterprises and hyperscalers.
  • Founded in 2012, with 500+ employees, and growing fast.
  • Investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove.
  • Have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG.
  • Values are publicly available: https://lambda.ai/careers

Equal Opportunity

  • Lambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.