# Senior Security Engineer - Enterprise Security

**Company**: Lambda
**Location**: Bellevue, Washington
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $266K - $395K
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.ashbyhq.com/lambda/8d2158d9-9785-4a2a-87ea-5690ff0cabe5?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_8f374341-753

## Description

Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU.

As a Senior Security Engineer on Enterprise Security, you'll secure Lambda as a business with people who use computers: the identities, devices, SaaS, and AI tools our employees and contractors use every day. Reporting to the Senior Manager of Security, you'll own security outcomes across the corporate environment, including systems other teams run, and solve the problems you find directly by building the controls, automation, and integrations that fix them.

**Responsibilities**

- Make the safe way to use AI tools and agents the easy way, with approved tools, connectors, and agent environments.

- Make sure humans, agents, and integrations move sensitive data only along reviewed paths, following Lambda's data protection strategy.

- Build the automation and proof that access in every app changes when someone's job changes and ends when they leave.

- Decide what a person, device, contractor, or agent must prove before reaching company systems, then engineer the checks and access paths that enforce it.

- Keep every corporate device hardened, monitored, and patched, building on the MDM and EDR platforms IT runs.

- Continuously find unmanaged SaaS, risky configuration, and sensitive data shared beyond where it belongs, and drive each finding to a fix.

- Turn contested trade-offs, such as when a managed device is required, into clear rules with a defined path for exceptions.

**Requirements**

- 5+ years of demonstrated security engineering in enterprise or corporate security, with controls employees kept using rather than routing around.

- A track record of independently owning security work end to end, making sound calls on your own and knowing when to escalate.

- Thrives in high-speed, high-ambiguity startup environments where priorities shift regularly and structure must be built while executing.

- Builds security employees can trust: transparent about what is monitored and why, respectful of their privacy, and enlisting people to fix problems rather than locking them out.

- Hands-on depth in workforce identity: identity providers and SSO (e.g., Okta, Entra ID), federation and provisioning standards (SAML, OIDC, SCIM), MFA, and privileged access.

- Practical experience securing corporate SaaS, managed endpoints (MDM, EDR), and network access built on zero trust principles.

- Ships high-quality automation in Python, Go, or similar, including security work done with LLMs or agents that wasn't practical by hand.

- Practical understanding of how people use AI assistants and agents at work, and where they create data and access risk.

- Translates security trade-offs into terms IT, HR, Legal, and employees act on, earning adoption with and without authority.

**Nice to Have**

- Experience securing contractor or personal-device access without managing the device.

- Experience controlling where data flows in AI-heavy or SaaS-heavy environments, through data perimeter, DLP, or similar controls.

- Experience isolating developer or agent workloads.

- Experience managing identity, SaaS, or endpoint configuration as code (e.g., Terraform).

- Experience supporting SOC 2, ISO 27001, or FedRAMP audits with evidence from corporate controls.

- Enterprise security experience at a high-growth tech company or cloud provider.

- Curiosity about how securing a workforce changes when much of its work is done by AI agents, and excitement to help work that out.

**Benefits**

- Generous cash & equity compensation

- Health, dental, and vision coverage for you and your dependents

- Wellness and commuter stipends for select roles

- 401k Plan with 2% company match (USA employees)

- Flexible paid time off plan

## Skills

### Required
- Python
- Go
- Okta
- Entra ID
- SAML
- OIDC
- SCIM
- MFA
- MDM
- EDR
- Terraform
- SOC 2
- ISO 27001
- FedRAMP

### Nice to have
- Experience securing contractor or personal-device access without managing the device
- Experience controlling where data flows in AI-heavy or SaaS-heavy environments
- Experience isolating developer or agent workloads
- Experience managing identity, SaaS, or endpoint configuration as code

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/lambda/8d2158d9-9785-4a2a-87ea-5690ff0cabe5?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)