Everything Lambda sells is built and run by our people. Securing how they work protects the business and customer data they handle and everything they build, from the code we ship to the infrastructure customers trust with their most valuable workloads. Near term, that means identity automation that keeps access matched to each person's role, secure access for contractors and personal devices, controls on where agents can send company data, and secure environments for running AI agents off laptops. You'll work with Lambda-hosted LLMs, alongside frontier models and AI tools, to take enterprise security further than traditional approaches allow.
This is a specialist security engineering role, not IT support. Lambda's people rapidly adopt frontier AI tools and agents, and making that safe is an engineering problem rather than a policy memo. If that's the problem you want to solve, we'd love to talk.
We value diverse backgrounds, experiences, and skills, and we are excited to hear from candidates who can bring unique perspectives to our team. If you do not exactly meet this description but believe you may be a good fit, please still apply and help us understand your readiness for this role. Your application is not a waste of our time.
What You'll Do
Securing the Corporate Environment
Make the safe way to use AI tools and agents the easy way, with approved tools, connectors, and agent environments.
Make sure humans, agents, and integrations move sensitive data only along reviewed paths, following Lambda's data protection strategy.
Build the automation and proof that access in every app changes when someone's job changes and ends when they leave.
Decide what a person, device, contractor, or agent must prove before reaching company systems, then engineer the checks and access paths that enforce it.
Keep every corporate device hardened, monitored, and patched, building on the MDM and EDR platforms IT runs.
Continuously find unmanaged SaaS, risky configuration, and sensitive data shared beyond where it belongs, and drive each finding to a fix.
Turn contested trade-offs, such as when a managed device is required, into clear rules with a defined path for exceptions.
Working Across Lambda Security
Ship Python or Go automation on top of the platforms IT runs, using Lambda-hosted LLMs, frontier models, and AI tools.
Measure control coverage and effectiveness, and partner with GRC so audit evidence comes straight from the controls.
Make corporate systems produce the telemetry D&R needs, and help respond to incidents in your area.
Help IT and engineering partners build secure instincts, and mentor newer members of the security team.
What We Think a Candidate Needs to Demonstrate to Succeed
5+ years of demonstrated security engineering in enterprise or corporate security, with controls employees kept using rather than routing around.
A track record of independently owning security work end to end, making sound calls on your own and knowing when to escalate.
Thrives in high-speed, high-ambiguity startup environments where priorities shift regularly and structure must be built while executing.
Builds security employees can trust: transparent about what is monitored and why, respectful of their privacy, and enlisting people to fix problems rather than locking them out.
Hands-on depth in workforce identity: identity providers and SSO (e.g., Okta, Entra ID), federation and provisioning standards (SAML, OIDC, SCIM), MFA, and privileged access.
Practical experience securing corporate SaaS, managed endpoints (MDM, EDR), and network access built on zero trust principles.
Ships high-quality automation in Python, Go, or similar, including security work done with LLMs or agents that wasn't practical by hand.
Practical understanding of how people use AI assistants and agents at work, and where they create data and access risk.
Translates security trade-offs into terms IT, HR, Legal, and employees act on, earning adoption with and without authority (we're all on the same team!).
Nice to Have
Experience securing contractor or personal-device access without managing the device.
Experience controlling where data flows in AI-heavy or SaaS-heavy environments, through data perimeter, DLP, or similar controls.
Experience isolating developer or agent workloads.
Experience managing identity, SaaS, or endpoint configuration as code (e.g., Terraform).
Experience supporting SOC 2, ISO 27001, or FedRAMP audits with evidence from corporate controls.
Enterprise security experience at a high-growth tech company or cloud provider.
Curiosity about how securing a workforce changes when much of its work is done by AI agents, and excitement to help work that out.
Salary Range Information
The annual salary range for this position has been set based on market data and other factors. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description.
About Lambda
Founded in 2012, with 500+ employees, and growing fast
Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove
We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG
Our values are publicly available: https://lambda.ai/careers
We offer generous cash & equity compensation
Health, dental, and vision coverage for you and your dependents
Wellness and commuter stipends for select roles
401k Plan with 2% company match (USA employees)
Flexible paid time off plan that we all actually use
Equal Opportunity Employer
Lambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.
