{"id":203060,"url":"https://alion.io/job/lam-research-information-security-engineer-4","title":"Information Security Engineer (Application Security)","company":{"id":58649,"name":"Lam Research","domain":"lamresearch.com","url":"https://alion.io/company/lam-research","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"C","score":57,"open_postings":621,"ghost_share":0.435,"stale_share":0.064,"repost_share":0.704,"time_to_fill_p50_days":72,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fremont, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":92000,"max":211000,"currency":"USD","period":"year","gross":null,"usd_annual":211000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bitbucket","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Jenkins","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AI Agents","optional":true},{"name":"Kubernetes","optional":true},{"name":"RAG","optional":true}],"status":"live","first_seen_at":"2026-06-24T20:15:18Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-10-29T11:55:44Z","board_verified":true,"closed_at":null,"days_open":126,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":126},"description":"The group you’ll be a part of\nThis position will be part of Lam Information Security’s Application Security team, supporting Secure SDLC, product security, application risk assessments, threat modeling, vulnerability validation, penetration testing, and AI-related security initiatives across Lam-developed applications and AI-enabled solutions.\nThe impact you’ll make\nThis position will increase Lam’s Application Security and Product Security capacity by helping scale Secure SDLC reviews, application risk assessments, threat modeling, vulnerability validation, penetration testing, and AI-related security reviews. The role will help reduce security risk earlier in the development lifecycle, improve consistency across Lam-developed applications and AI-enabled solutions, and support engineering teams in delivering secure software with appropriate controls for data, access, AI model usage, logging, and human oversight.\nWhat you’ll do\nSupport the objectives of the Application Security team by contributing to secure design, Secure SDLC execution, and product security reviews. \nAssist with application risk assessments, secure design reviews, threat modeling, code review, vulnerability assessment, and penetration testing. \nSupport the integration and operational use of application security tools, including SAST, SCA and DAST, and other DevSecOps capabilities in CI/CD pipelines. \nWork with development teams to identify and document security requirements, common application risks, and required controls based on application risk level, data sensitivity, exposure, and system interconnections. \nHelp engineering teams interpret and apply secure coding standards, OWASP guidance, internal Secure SDLC requirements, and product security best practices. \nAssist in reviewing AI-related security risks, including prompt injection, insecure model/tool integration, data leakage, excessive autonomy, insecure AI outputs, model sourcing, sensitive data exposure, and lack of human-in-the-loop controls. \nParticipate in AI-related security initiatives, including secure AI model usage, AI-assisted development governance, AI-enabled application review, and secure MLOps process improvement. \nResearch, evaluate, and help pilot new security capabilities, automation, and AI-assisted AppSec workflows under guidance from senior security engineers. \nDocument findings, recommendations, and review outcomes clearly for application teams, security leadership, and governance tracking. \nPartner with cross-functional teams to improve secure development practices and reduce application and product security risk.\nWho we’re looking for\nBachelor’s degree in computer science, Information Security, Information Technology, Engineering, or related field, or equivalent practical experience.\n3+ years of experience in information security, application security, product security, software engineering, DevSecOps, or related technical field.\nWorking knowledge of Secure SDLC practices, including threat modeling, secure design review, code review, vulnerability assessment, and security testing.\nFamiliarity with common application security frameworks and risks, including OWASP Top 10, API security, authentication/authorization, input validation, secrets management, and secure coding practices.\nHands-on or working experience with one or more application security tools such as SAST, DAST, SCA, secrets scanning, container scanning, or vulnerability management platforms.\nBasic understanding of CI/CD pipelines and developer tools such as Git, Bitbucket, Jenkins, Azure DevOps, Artifactory, or similar platforms.\nAbility to analyze technical information, identify security risks, and communicate findings clearly to engineering and security stakeholders.\nStrong collaboration skills and ability to work with cross-functional global teams.\nPreferred qualifications\nExperience supporting security reviews for cloud, product, or manufacturing/engineering software environments.\nExperience with Azure, Microsoft DevOps, Kubernetes, containers, APIs, or modern application architectures.\nExposure to AI/ML security concepts, including generative AI, RAG, AI agents, model governance, prompt injection, model/data leakage, AI-assisted coding, and secure MLOps.\nFamiliarity with security requirements for AI-enabled applications, including approved model usage, data minimization, access control, logging, monitoring, human oversight, and secure tool/plugin integration.\nExperience helping engineering teams remediate application vulnerabilities and validate fixes.\nSecurity certifications such as Security+, CSSLP, CISSP, GIAC, or similar are preferred but not required.\nAbility to break down complex security problems, document practical recommendations, and contribute to repeatable security review processes.\nOur commitment\nWe believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.\nLam Research (\"Lam\" or the \"Company\") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.\nLam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories - On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.\nSalary\nCA San Francisco Bay Area Salary Range for this position: $92,000.00 - $211,000.00.\nThe above salary range for this position is relevant to applicants that reside or work onsite in the California, San Francisco Bay Area only. Salary offers will depend on factors that include the location you work from, your level, education, training, specific skills, years of experience and comparison to other employees already in this role. Actual salary may vary from salary offered due to numerous factors including but not limited to unpaid time off, unpaid leave, company mandated shutdown, and other relevant factors.\nOur Perks and Benefits\nAt Lam, our people make amazing things possible. That’s why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.","description_format":"text","description_chars":7170,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cybersecurity","Manufacturing","Semiconductor Manufacturing"],"lifecycle":[{"event":"open","at":"2026-09-04T21:21:58Z"},{"event":"close","at":"2026-09-05T06:37:40Z"},{"event":"reopen","at":"2026-09-08T23:09:24Z"},{"event":"close","at":"2026-09-09T02:09:30Z"},{"event":"reopen","at":"2026-09-09T05:09:30Z"},{"event":"close","at":"2026-09-09T08:09:31Z"},{"event":"reopen","at":"2026-09-09T20:10:11Z"},{"event":"close","at":"2026-09-09T23:10:13Z"},{"event":"reopen","at":"2026-09-10T11:10:22Z"},{"event":"close","at":"2026-09-10T14:10:24Z"},{"event":"reopen","at":"2026-09-11T01:41:05Z"},{"event":"close","at":"2026-09-11T11:14:34Z"},{"event":"reopen","at":"2026-09-11T14:14:50Z"},{"event":"close","at":"2026-09-11T17:31:49Z"},{"event":"reopen","at":"2026-09-11T20:31:49Z"},{"event":"close","at":"2026-09-12T00:12:28Z"},{"event":"reopen","at":"2026-09-12T03:20:38Z"},{"event":"close","at":"2026-09-12T13:02:39Z"},{"event":"reopen","at":"2026-09-12T22:06:01Z"},{"event":"close","at":"2026-09-13T13:06:09Z"},{"event":"reopen","at":"2026-09-13T19:06:09Z"},{"event":"close","at":"2026-09-14T04:06:32Z"},{"event":"reopen","at":"2026-09-14T17:28:58Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 233 · green card filings: 85","filings_12m":233,"filings_prev_12m":267,"green_card_filings_12m":85,"median_offered_wage_usd":137500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":6}],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.692,"p_room":0.36,"age_days":126,"expected_fill_days":72,"reasons":["conf:2","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":211000,"is_top_pay":true},"html_url":"https://alion.io/job/lam-research-information-security-engineer-4","json_url":"https://alion.io/job/lam-research-information-security-engineer-4.json","meta":{"generated_at":"2026-10-29T12:22:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18526,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58649},"rest":"https://alion.io/mcp/rest/get_company?id=58649"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flam-research-information-security-engineer-4"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flam-research-information-security-engineer-4"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flam-research-information-security-engineer-4"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lam-research-information-security-engineer-4\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flam-research-information-security-engineer-4"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":203060}},{"tool":"search_jobs","arguments":{"company":"lamresearch.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":203060},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}