Senior Security Engineer - Enterprise Security
San Francisco, San Francisco County, California, 94199, USA
Listed on 2026-10-18
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Cloud Computing: Infrastructure & Operations
Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU.
If you'd like to build the world's best AI cloud, join us.
Note:
This position requires presence in our Bellevue, San Francisco, or San Jose office location 4 days per week;
Lambda’s designated work from home day is currently Tuesday.
Lambda Security protects some of the world's most valuable digital assets: invaluable training data, model weights representing immense computational investments, and the sensitive inputs required to leverage best of breed AI models. We're responsible for securing every byte that powers breakthrough artificial intelligence.
Reporting to the CISO, you'll be a key member of the Enterprise Security team responsible for securing Lambda's SaaS applications, corporate IT infrastructure, identity and access management (IAM), and endpoint ecosystems. Your work will focus on establishing secure-by-default configurations, automating access governance, and protecting corporate environments as Lambda scales rapidly.
You will directly impact the security posture of our enterprise operations by implementing robust Identity Governance and Administration (IGA), hardening corporate SaaS tools, automating joiner-mover-leaver (JML) workflows, and deploying zero-trust network access controls. Leveraging Lambda's hosted LLMs, you'll pioneer AI-driven enterprise security automation—such as intelligent access reviews, automated policy enforcement, and SaaS risk monitoring.
If you're excited about building enterprise security controls that balance strong protection with developer and employee productivity, we want to talk.
We value diverse backgrounds, experiences, and skills, and we are excited to hear from candidates who can bring unique perspectives to our team. If you do not exactly meet this description but believe you may be a good fit, help us understand your readiness for a Sr. Security Engineer role.
What You’ll Do Identity & Access Governance:Design, deploy, and maintain Identity and Access Management (IAM) architectures, SSO/IdP integrations (Okta, Entra ), and Privileged Access Management (PAM) across corporate and SaaS ecosystems
Automate Joiner-Mover-Leaver (JML) workflows and lifecycle management to enforce least-privilege access and zero-trust principles across all internal tooling
Build automated access certification and review tooling to streamline compliance and governance controls
Implement strong multi-factor authentication (MFA) standards, passwordless solutions, and contextual access policies
Infrastructure:
Establish SaaS Security Posture Management (SSPM) and conduct security posture reviews for corporate SaaS applications (Google Workspace, Slack, Git Hub, Jira, Salesforce)
Define and enforce baseline security configurations, patch management policies, and MDM/EDR security controls across corporate endpoints (macOS, Windows, Linux)
Partner with IT Infrastructure and Operations teams to architect Zero Trust Network Access (ZTNA), VPN/SASE solutions, and secure remote worker access frameworks
Innovation:
Develop custom security automation tools and scripts in Python or Go to eliminate manual IT/Enterprise security toil
Pioneer AI-powered enterprise security workflows leveraging Lambda’s hosted LLMs to automate third-party risk analysis, access request approvals, and anomaly detection in corporate logs
Assess third-party vendor risks and build automated tooling to evaluate SaaS vendor…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).