{"id":3663314,"url":"https://alion.io/job/lambda-senior-security-engineer-detection-response","title":"Senior Security Engineer - Detection & Response","company":{"id":32991,"name":"Lambda","domain":"lambda.ai","url":"https://alion.io/company/lambda-ai","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":88,"open_postings":8,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States","San Jose, United States","Bellevue, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":266000,"max":395000,"currency":"USD","period":"year","gross":null,"usd_annual":395000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Bash","optional":false},{"name":"Falco","optional":false},{"name":"GCP","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"SIEM","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false},{"name":"eBPF","optional":true},{"name":"FedRAMP","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"Machine Learning","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-03T01:36:20Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-07T16:01:17Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU.\nIf you'd like to build the world's best AI cloud, join us.\n*Note: This position requires presence in our Bellevue, San Francisco, or San Jose office location 4 days per week; Lambda’s designated work from home day is currently Tuesday.\nAbout the Role\nLambda Security protects some of the world's most valuable digital assets: invaluable training data, model weights representing immense computational investments, and the sensitive inputs required to leverage best of breed AI models. We're responsible for securing every byte that powers breakthrough artificial intelligence.\nReporting to the Security Engineering Lead, you will serve as a hands-on technical expert on the Detection & Response team-acting as an intelligent backstop that ensures Lambda is the safest place to build with AI by catching security issues in real-time while enabling our business to move at hypergrowth velocity. You will help transform reactive security operations into a proactive threat management engine, dedicating the majority of your effort to automation, threat hunting, detection engineering, and incident response capability building rather than constant firefighting.\nYou will directly affect customers’ trust in the safety of their data by implementing enterprise-grade detection capabilities, automating incident response workflows, and hardening our multi-cloud and bare metal infrastructure. With unique access to LLMs hosted on our own infrastructure, you will pioneer AI-powered security solutions that wouldn't be possible anywhere else. Key priorities include maintaining 24/7 operational resilience through smart automation, rapid incident investigation and mitigation, and advancing our technical D&R capabilities.\nIf you're excited about building detection and response automation so efficient that security operations become \"almost boring,\" where code handles the routine so you can focus on novel threats, we want to talk.\nWe value diverse backgrounds, experiences, and skills, and we are excited to hear from candidates who can bring unique perspectives to our team. If you do not exactly meet this description but believe you may be a good fit, please still apply and help us understand your readiness for a Senior Security Engineer role. Your application is not a waste of our time.\nWhat You’ll Do\nDetection Engineering & Threat Hunting:\nDesign, build, and maintain robust detection rules, signatures, and behavioral analytics across Lambda's cloud, bare-metal, and internal infrastructure\n\nConduct proactive threat hunting operations to uncover hidden threat actors, novel attack vectors, and zero-day vulnerabilities across multi-cloud and AI workloads\n\nDevelop custom detection logic and playbooks as code, eliminating manual triage toil and reducing time-to-detect and time-to-respond\n\nPioneer AI-powered detection and investigation workflows leveraging our internal LLM infrastructure to automate log analysis and threat intelligence context\n\nIncident Response & Security Architecture:\nLead technical incident response investigations for complex security events, performing deep-dive forensic analysis, root-cause identification, and containment\n\nArchitect automated response capabilities and orchestration pipelines (SOAR) to programmatically isolate compromised assets and revoke compromised credentials\n\nPartner with Platform and Infrastructure engineering teams to harden systems, build security instrumentation, and ensure telemetry coverage across all services\n\nOperational Execution & Continuous Improvement:\nParticipate in an engineering on-call rotation to maintain 24/7 operational readiness and rapid incident containment\n\nConduct post-incident reviews to extract technical learnings, drive root-cause remediation, and prevent recurring incidents\n\nMentor junior and mid-level security engineers, sharing technical domain expertise and promoting best practices in detection engineering and automation\n\nYou\n5+ years of hands-on security engineering experience specializing in detection engineering, threat hunting, or digital forensics and incident response (DFIR)\n\nStrong programming/scripting proficiency (e.g., Python, Go, Rust, or Bash) with a track record of building automated security tools and pipelines\n\nDeep technical knowledge of cloud infrastructure security (AWS/GCP), Linux system internals, container runtime security, and network telemetry\n\nClear understanding of the unique requirements of securing a cloud infrastructure provider\n\nProven experience writing detection rules (SIEM, YARA, Sigma, Falco, or EDR queries) and managing detections through software development best practices\n\nHands-on experience conducting forensic investigations and triaging complex, multi-stage attacks across cloud environments\n\nStrong technical communication skills with the ability to document complex vulnerabilities, incident post-mortems, and architectural designs clearly\n\nThrives in high-ambiguity environments where you must build structure while executing at startup pace\n\nNice to Have\nExcitement about leveraging our direct access to state-of-the-art LLMs to revolutionize security operations-imagine AI-powered threat hunting, automated security report generation, and intelligent vulnerability prioritization at a scale only possible when you host the AI infrastructure yourself.\n\nExperience building D&R programs at AI/ML companies\n\nTrack record using AI/ML for security operations automation (yes, we know it’s all brand new)\n\nBackground scaling security during hypergrowth (10x growth phases)\n\nExperience with eBPF, kernel-level telemetry, or specialized bare-metal host security tools\n\nExperience with both build and buy decisions for security tooling\n\nExperience driving or providing significant evidence for compliance audits, such as SOC 2, ISO 27001, PCI-DSS, HIPAA/HITECH, or FedRAMP.\n\nSalary Range Information\nThe annual salary range for this position has been set based on market data and other factors. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description.\nAbout Lambda\nFounded in 2012, with 500+ employees, and growing fast\n\nOur investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove\n\nWe have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG\n\nOur values are publicly available: https://lambda.ai/careers\n\nWe offer generous cash & equity compensation\n\nHealth, dental, and vision coverage for you and your dependents\n\nWellness and commuter stipends for select roles\n\n401k Plan with 2% company match (USA employees)\n\nFlexible paid time off plan that we all actually use\n\nEqual Opportunity Employer\nLambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.","description_format":"text","description_chars":7606,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","Servers & Data Center Hardware","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-11-03T04:23:58Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 19","filings_12m":19,"filings_prev_12m":8,"green_card_filings_12m":0,"median_offered_wage_usd":267500,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":3}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":49,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":395000,"is_top_pay":true},"html_url":"https://alion.io/job/lambda-senior-security-engineer-detection-response","json_url":"https://alion.io/job/lambda-senior-security-engineer-detection-response.json","meta":{"generated_at":"2026-11-07T18:24:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27870,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":32991},"rest":"https://alion.io/mcp/rest/get_company?id=32991"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flambda-senior-security-engineer-detection-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flambda-senior-security-engineer-detection-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flambda-senior-security-engineer-detection-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lambda-senior-security-engineer-detection-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flambda-senior-security-engineer-detection-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3663314}},{"tool":"search_jobs","arguments":{"company":"lambda.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3663314},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}