Senior Security Engineer - Enterprise Security

Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU. If you'd like to build the world's best AI cloud, join us. *Note: This position requires presence in our Bellevue, San Francisco, or San Jose office location 4 days per week; Lambda's designated work from home day is currently Tuesday. About the Role Lambda Security protects some of the world's most valuable digital assets: training data, model weights representing immense computational investments, and the sensitive inputs required to leverage best-of-breed AI models. We're responsible for securing every byte that powers breakthrough artificial intelligence. As a Senior Security Engineer on Enterprise Security, you'll secure Lambda as a business with people who use computers: the identities, devices, SaaS, and AI tools our employees and contractors use every day. Reporting to the Senior Manager of Security, you'll own security outcomes across the corporate environment, including systems other teams run, and solve the problems you find directly by building the controls, automation, and integrations that fix them. You'll partner with IT, HR, Legal, GRC, Detection & Response, Security Platform, and Developer Productivity. Everything Lambda sells is built and run by our people. Securing how they work protects the business and customer data they handle and everything they build, from the code we ship to the infrastructure customers trust with their most valuable workloads. Near term, that means identity automation that keeps access matched to each person's role, secure access for contractors and personal devices, controls on where agents can send company data, and secure environments for running AI agents off laptops. You'll work with Lambda-hosted LLMs, alongside frontier models and AI tools, to take enterprise security further than traditional approaches allow. This is a specialist security engineering role, not IT support. Lambda's people rapidly adopt frontier AI tools and agents, and making that safe is an engineering problem rather than a policy memo. If that's the problem you want to solve, we'd love to talk. We value diverse backgrounds, experiences, and skills, and we are excited to hear from candidates who can bring unique perspectives to our team. If you do not exactly meet this description but believe you may be a good fit, please still apply and help us understand your readiness for this role. Your application is not a waste of our time. What You'll Do Securing the Corporate Environment: - Make the safe way to use AI tools and agents the easy way, with approved tools, connectors, and agent environments. - Make sure humans, agents, and integrations move sensitive data only along reviewed paths, following Lambda's data protection strategy. - Build the automation and proof that access in every app changes when someone's job changes and ends when they leave. - Decide what a person, device, contractor, or agent must prove before reaching company systems, then engineer the checks and access paths that enforce it. - Keep every corporate device hardened, monitored, and patched, building on the MDM and EDR platforms IT runs. - Continuously find unmanaged SaaS, risky configuration, and sensitive data shared beyond where it belongs, and drive each finding to a fix. - Turn contested trade-offs, such as when a managed device is required, into clear rules with a defined path for exceptions. Working Across Lambda Security: - Ship Python or Go automation on top of the platforms IT runs, using Lambda-hosted LLMs, frontier models, and AI tools. - Measure control coverage and effectiveness, and partner with GRC so audit evidence comes straight from the controls. - Make corporate systems produce the telemetry D&R needs, and help respond to incidents in your area. - Help IT and engineering partners build secure instincts, and mentor newer members of the security team. What We Think a Candidate Needs to Demonstrate to Succeed - 5+ years of demonstrated security engineering in enterprise or corporate security, with controls employees kept using rather than routing around. - A track record of independently owning security work end to end, making sound calls on your own and knowing when to escalate. - Thrives in high-speed, high-ambiguity startup environments where priorities shift regularly and structure must be built while executing. - Builds security employees can trust: transparent about what is monitored and why, respectful of their privacy, and enlisting people to fix problems rather than locking them out. - Hands-on depth in workforce identity: identity providers and SSO (e.g., Okta, Entra ID), federation and provisioning standards (SAML, OIDC, SCIM), MFA, and privileged access. - Practical experience securing corporate SaaS, managed endpoints (MDM, EDR), and network access built on zero trust principles. - Ships high-quality automation in Python, Go, or similar, including security work done with LLMs or agents that wasn't practical by hand. - Practical understanding of how people use AI assistants and agents at work, and where they create data and access risk. - Translates security trade-offs into terms IT, HR, Legal, and employees act on, earning adoption with and without authority (we're all on the same team!). Nice to Have - Experience securing contractor or personal-device access without managing the device. - Experience controlling where data flows in AI-heavy or SaaS-heavy environments, through data perimeter, DLP, or similar controls. - Experience isolating developer or agent workloads. - Experience managing identity, SaaS, or endpoint configuration as code (e.g., Terraform). - Experience supporting SOC 2, ISO 27001, or FedRAMP audits with evide