Senior Software Engineer - Kernel/Security

Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU.

If you'd like to build the world's best AI cloud, join us.

*Note: This position requires presence in our San Francisco office location 4 days per week; Lambda’s designated work from home day is currently Tuesday.

What You’ll Do

• Design and implement foundational Linux security features and software infrastructure to protect large-scale AI/ML workloads running across thousands of GPUs in modern cloud platforms.
• Develop advanced security capabilities for containerized environments, including container runtime security, image signing and verification, vulnerability scanning, namespace isolation, and control groups.
• Develop kernel integrity monitoring solutions using Linux Integrity Measurement Architecture (IMA), Extended Verification Module (EVM), and eBPF-based observability, integrating with SEIM systems for real-time detection and forensic analysis of kernel-level threats.
• Engineer security capabilities for virtualized environments, including hypervisor hardening (KVM/QEMU), secure VM provisioning, encrypted storage, inter-VM network segmentation, and integration of hardware-assisted virtualization security features.
• Perform system hardening by applying security baselines, disabling unnecessary services, enforcing strong authentication, configuring kernel parameters, and automating compliance through configuration management tools.
• Architect and implement isolation technologies, including hardware-based enclaves, micro-segmentation, and sandboxing mechanisms to ensure a strong separation between workloads in multi-tenant environments.

Some telecommuting permitted (hybrid)

You

• Have a Master’s degree or foreign equivalent in Computer Engineering, Computer Science, or related field
• Have 3+ years of experience as Senior Software Engineer, Senior Systems Engineer, or related occupation
• Must have at least 1 year of prior work experience in each of the following
• Linux-based production systems with focus on security at the OS and kernel level: SELinux, AppArmor, seccomp, namespaces, cgroups, integrity measurement, and TPM.
• Linux kernel internals and securing kernel subsystems: Syscall filtering, LSMs, audit frameworks, and eBPF for security observability.
• Building or securing core cloud infrastructure: secure virtualization, KVM, QEMU, hardened images, secure boot, confidential computing, software-defined perimeter, network segmentation, firewalling, and identity and access management.
• Designing and implementing end-to-end security architecture for large-scale, distributed systems.
• Threat modeling, risk analysis, and mitigation planning for both x86_64 and aarch64 platforms.
• Programming languages: C, Rust, Python, and Go.
• Architecting and implementing isolation technologies including hardware-based enclaves: Intel SGX, AMD SEV, and ARM TrustZone.

About Lambda

• Founded in 2012, with 500+ employees, and growing fast
• Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove
• We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG
• Our values are publicly available: https://lambda.ai/careers
• We offer generous cash & equity compensation
• Health, dental, and vision coverage for you and your dependents
• Wellness and commuter stipends for select roles
• 401k Plan with 2% company match (USA employees)
• Flexible paid time off plan that we all actually use

Equal Opportunity Employer

Lambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.