Network Security Engineer

Lightning AI is the company behind PyTorch Lightning. Founded in 2019, we build an end-to-end platform for developing, training, and deploying AI systems—designed to take ideas from research to production with less friction.

Through our merger with Voltage Park, a neocloud and AI Factory, Lightning AI combines developer-first software with cost-efficient, large-scale compute. Teams get the tools they need for experimentation, training, and production inference, with security, observability, and control built in.

We serve solo researchers, startups, and large enterprises. Lightning AI operates globally with offices in New York City, San Francisco, Seattle, and London, and is backed by Coatue, Index Ventures, Bain Capital Ventures, and Firstminute.

We’re looking for a Network Security Engineer to design, implement, and maintain secure network infrastructure across Lightning AI’s platform. In this role, you’ll take ownership of security systems and controls, working closely with infrastructure and engineering teams to ensure the reliability and protection of our production environment, including safeguarding our AI infrastructure against evolving threats.

This role can be based out of one of our office hubs (San Francisco or Seattle), with in-office requirements of at least 2 days per week and occasional team and company offsites. We are not able to offer visa sponsorship for this position at this time.

• →Network Security Design & Implementation: Architect robust network infrastructures, leveraging firewalls, VPNs, IDS/IPS, and network segmentation to enhance security.
• →Threat Prevention & Risk Mitigation: Conduct comprehensive vulnerability assessments and penetration tests, ensuring robust security policies and access controls.
• →Monitoring & Incident Response: Utilize SIEM tools for proactive threat detection and collaborate with SOC teams for incident response and breach investigation.
• →Compliance & Security Governance: Ensure compliance with industry standards and regulatory requirements, maintaining thorough security documentation.
• →Security Automation & Optimization: Implement and optimize automation tools for threat detection and response, while staying abreast of emerging security technologies.

• Technical Expertise in firewalls (e.g., Palo Alto, Cisco ASA, Fortinet), IDS/IPS, VPNs, SD-WAN, cloud security, and encryption.
• Proficiency with Security Tools: Experience with SIEM (e.g., Splunk, QRadar), vulnerability scanners (e.g., Nessus, Qualys), and endpoint security solutions.
• Relevant Certifications, such as CCNP Security, CEH, CISSP, and GIAC Certifications (GSEC, GCIH, GPEN).
• A Passion for Security: A proactive approach to learning about new security technologies and threats