Senior Software Engineer - Kernel/Security
Lambda · San Francisco, CA
- On site
- Full-time
- $400,000 / year
- San Francisco, CA
Tailored resume — keyword-matched to this role.
Hiring manager — we find who's hiring.
Intro email — drafted to reach them directly.
Job highlights
- Build AI cloud infrastructure security.
- Secure large-scale GPU workloads.
- Develop container and VM security.
- Implement kernel integrity monitoring.
- Requires 3+ years experience.
About the role
Senior Software Engineer - Kernel/Security
Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU.
If you'd like to build the world's best AI cloud, join us.
Note: This position requires presence in our San Francisco office location 4 days per week; Lambda’s designated work from home day is currently Tuesday.
What You’ll Do
- Design and implement foundational Linux security features and software infrastructure to protect large-scale AI/ML workloads running across thousands of GPUs in modern cloud platforms.
- Develop advanced security capabilities for containerized environments, including container runtime security, image signing and verification, vulnerability scanning, namespace isolation, and control groups.
- Develop kernel integrity monitoring solutions using Linux Integrity Measurement Architecture (IMA), Extended Verification Module (EVM), and eBPF-based observability, integrating with SEIM systems for real-time detection and forensic analysis of kernel-level threats.
- Engineer security capabilities for virtualized environments, including hypervisor hardening (KVM/QEMU), secure VM provisioning, encrypted storage, inter-VM network segmentation, and integration of hardware-assisted virtualization security features.
- Perform system hardening by applying security baselines, disabling unnecessary services, enforcing strong authentication, configuring kernel parameters, and automating compliance through configuration management tools.
- Architect and implement isolation technologies, including hardware-based enclaves, micro-segmentation, and sandboxing mechanisms to ensure a strong separation between workloads in multi-tenant environments.
Some telecommuting permitted (hybrid)
You
- Have a Master’s degree or foreign equivalent in Computer Engineering, Computer Science, or related field.
- Have 3+ years of experience as Senior Software Engineer, Senior Systems Engineer, or related occupation.
- Must have at least 1 year of prior work experience in each of the following:
- Linux-based production systems with focus on security at the OS and kernel level: SELinux, AppArmor, seccomp, namespaces, cgroups, integrity measurement, and TPM.
- Linux kernel internals and securing kernel subsystems: Syscall filtering, LSMs, audit frameworks, and eBPF for security observability.
- Building or securing core cloud infrastructure: secure virtualization, KVM, QEMU, hardened images, secure boot, confidential computing, software-defined perimeter, network segmentation, firewalling, and identity and access management.
- Designing and implementing end-to-end security architecture for large-scale, distributed systems.
- Threat modeling, risk analysis, and mitigation planning for both x86_64 and aarch64 platforms.
- Programming languages: C, Rust, Python, and Go.
- Architecting and implementing isolation technologies including hardware-based enclaves: Intel SGX, AMD SEV, and ARM TrustZone.
About Lambda
- Founded in 2012, with 500+ employees, and growing fast.
- Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove.
- We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG.
- Our values are publicly available: https://lambda.ai/careers.
- We offer generous cash & equity compensation.
- Health, dental, and vision coverage for you and your dependents.
- Wellness and commuter stipends for select roles.
- 401k Plan with 2% company match (USA employees).
- Flexible paid time off plan that we all actually use.
Equal Opportunity Employer
Lambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.
Compensation Range: $346K - $444K
Key skills/competency
- Linux Kernel Security
- Container Security
- Virtualization Security
- System Hardening
- Isolation Technologies
- eBPF
- Threat Modeling
- C/C++
- Rust
- Go
Skills & topics
- Senior Software Engineer
- Kernel Security
- Linux Security
- Cloud Security
- Container Security
- Virtualization Security
- eBPF
- System Hardening
- C++
- Rust
- Go
- Python
- AI Cloud
- ML Infrastructure
- Cybersecurity
- SELinux
- AppArmor
- TPM
- Intel SGX
- AMD SEV
How to get hired
- Tailor your resume: Highlight Linux kernel security, cloud infrastructure, and C/C++/Rust experience for Senior Software Engineer roles.
- Showcase security expertise: Detail your experience with SELinux, AppArmor, seccomp, namespaces, cgroups, and eBPF in your application.
- Demonstrate cloud security knowledge: Emphasize your background in secure virtualization, KVM, QEMU, and confidential computing.
- Prepare for technical interviews: Be ready to discuss kernel internals, threat modeling, and secure system design principles.
- Understand Lambda's mission: Articulate how your skills align with building the world's best AI cloud infrastructure.
Technical preparation
Master Linux kernel internals and security.,Practice C, Rust, Python, and Go programming.,Familiarize with KVM, QEMU, and hypervisors.,Study threat modeling and risk analysis.
Behavioral questions
Describe a complex kernel security challenge.,How do you handle multi-tenant security?,Tell me about a time you automated security.,How do you stay updated on threats?
Frequently asked questions
- What is the work arrangement for the Senior Software Engineer Kernel Security role at Lambda?
- The Senior Software Engineer Kernel Security role at Lambda operates on a hybrid work arrangement. While some telecommuting is permitted, this position requires presence in the San Francisco office 4 days per week, with Tuesday designated as the work-from-home day.
- What are the key responsibilities of a Senior Software Engineer Kernel Security at Lambda?
- As a Senior Software Engineer Kernel Security at Lambda, you will design and implement Linux security features, develop advanced security for containers and virtualized environments, engineer kernel integrity monitoring, perform system hardening, and architect isolation technologies for large-scale AI/ML workloads.
- What technical skills are essential for the Senior Software Engineer Kernel Security position at Lambda?
- Essential technical skills include deep knowledge of Linux kernel internals and security (SELinux, AppArmor, eBPF), experience with secure cloud infrastructure (KVM, QEMU), proficiency in C, Rust, Python, and Go, and expertise in designing end-to-end security architectures for distributed systems.
- What is Lambda's mission and how does this role contribute to it?
- Lambda's mission is to make compute as ubiquitous as electricity and empower everyone with superintelligence. This Senior Software Engineer role directly contributes by building the secure AI cloud infrastructure necessary to support these goals, ensuring the safety and integrity of large-scale AI/ML workloads.
- What is the required educational background for the Senior Software Engineer Kernel Security role?
- The role requires a Master’s degree or foreign equivalent in Computer Engineering, Computer Science, or a related field. Additionally, candidates must possess at least 3 years of experience as a Senior Software Engineer, Senior Systems Engineer, or in a related occupation, with a minimum of 1 year in specific security-focused areas.
- Can you explain the compensation range for the Senior Software Engineer Kernel Security position at Lambda?
- The compensation range for the Senior Software Engineer Kernel Security position at Lambda is between $346,000 and $444,000 annually. This includes generous cash and equity compensation.
- What are Lambda's key investors and what does this mean for potential employees?