{"id":3307079,"url":"https://alion.io/job/lam-research-senior-devsecops-engineer","title":"Senior DevSecOps Engineer","company":{"id":58649,"name":"Lam Research","domain":"lamresearch.com","url":"https://alion.io/company/lam-research","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"C","score":56,"open_postings":635,"ghost_share":0.438,"stale_share":0.065,"repost_share":0.71,"time_to_fill_p50_days":71,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Waltham, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":137000,"max_usd":261000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bitbucket","optional":false},{"name":"CI/CD","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Jenkins","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SonarQube","optional":false},{"name":"Windows","optional":false},{"name":"Angular","optional":true},{"name":"AWS","optional":true},{"name":"C++","optional":true},{"name":"Docker","optional":true},{"name":"GCP","optional":true},{"name":"Invicti","optional":true},{"name":"JavaScript","optional":true},{"name":"JFrog Artifactory","optional":true},{"name":"Kubernetes","optional":true},{"name":"npm","optional":true},{"name":"Threat Modeling","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-10-16T15:51:34Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-28T14:39:26Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"The group you’ll be a part of\nThe Office of the CTO is where innovation takes center stage. We inspire our global technical community to take on grand challenges, understand emerging trends, identify the critical inflections, and drive our sustainability, Environment, Social, and Governance (ESG) practices that will define the next generation of semiconductors and continued impact.\nThe impact you’ll make\nWithin Semiverse® Solutions at Lam Research, we build innovative software products to solve semiconductor technology challenges. Our leading 3D modeling software is revolutionizing the way semiconductor chips are fabricated around the world. Enabled by our core intellectual property - an accelerated 3D voxel modeling and visualization engine - our software is highly successful and is quickly evolving as our business and customer base expand rapidly.\nAs a Senior DevSecOps Engineer, you will be part of the Engineering Operations team, owning the security health of our desktop software products, web applications, and development pipelines. You’ll upgrade third-party and open-source dependencies directly in our product code, run automated tests, and troubleshoot compatibility issues. You’ll maintain the security scanning built into our CI/CD pipelines, and you’ll work closely with Product Security Engineers and Application Security Engineers in our central InfoSec organization to guide our products through a Secure Software Development Lifecycle (SDLC). This is a senior-level position with opportunities for independently driving projects to completion as well as technical career growth.\nWhat you’ll do\nRemediate vulnerabilities in third-party and open-source dependencies identified by SCA and SAST scans, opening and testing pull requests directly against product code\nRun automated test suites and troubleshoot build and compatibility issues caused by dependency upgrades, collaborating with developers when deeper product expertise is needed\nReduce outstanding security exceptions by identifying upgrade paths, replacement components, or mitigations for vulnerable dependencies\nMaintain and improve SAST, SCA, and DAST scanning and its integration into CI/CD pipelines, including scan templates, quality gates, and policies\nGenerate and maintain Software Bills of Materials (SBOMs) and support vulnerability tracking and handling for released products\nServe as the primary point of contact between Engineering and InfoSec, coordinating risk assessments, architecture and infrastructure reviews, and security exception requests by gathering inputs from development teams and tracking reviews through to approval\nPartner with Application Security Engineers on DAST and penetration testing, helping developers interpret findings and track remediation\nWho we’re looking for\nTeam player who enjoys supporting and working with others\nSystematic work style and excellent attention to detail\nBachelor’s degree in Computer Science or a related field with at least 8 years of professional experience, a Master’s degree with at least 6 years, or an Associate degree or equivalent technical background with at least 10 years, in software engineering, DevOps, or application security\nProficient with Git and source code management platforms, such as Bitbucket, GitHub, or Azure Repos\nProficient in both Windows and Linux environments\nStrong Python skills, including dependency management (pip, virtual environments, requirements and lock files) and reading and modifying production code\nProficient with CI/CD tools, such as Jenkins, Azure DevOps, or GitHub Actions\nProven experience upgrading third-party dependencies in an existing codebase and resolving the resulting build, API, and test failures\nHands-on experience with SCA and SAST tools, such as Black Duck and SonarQube, including triaging findings and identifying false positives\nWorking knowledge of Secure SDLC practices and vulnerability standards, such as CVE, CVSS, and the OWASP Top 10\nClear written communication skills for preparing security documentation and working with security teams\nPreferred qualifications\nExperience with containerization technologies, such as Docker or Kubernetes\nExperience with repository managers, such as Artifactory\nExperience with cloud computing services, such as Azure, AWS, or GCP\nExperience with C++ and build systems, such as gmake, scons, or cmake\nExperience with DAST tools, such as Invicti\nExperience generating and managing SBOMs in standard formats, such as SPDX or CycloneDX\nUnderstanding of open-source license compliance\nExperience supporting application security reviews, threat modeling, or penetration test remediation\nFamiliarity with Python scientific and engineering libraries\nExperience managing JavaScript/TypeScript dependencies with npm, including upgrades in Angular applications\nOur commitment\nWe believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.\nLam Research (\"Lam\" or the \"Company\") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.\nLam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories - On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.\nOur Perks and Benefits\nAt Lam, our people make amazing things possible. That’s why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.","description_format":"text","description_chars":6565,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"associate","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Semiconductor Equipment"],"lifecycle":[{"event":"open","at":"2026-10-27T01:51:38Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 233 · green card filings: 85","filings_12m":233,"filings_prev_12m":267,"green_card_filings_12m":85,"median_offered_wage_usd":137500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":6}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":11,"expected_fill_days":71,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/lam-research-senior-devsecops-engineer","json_url":"https://alion.io/job/lam-research-senior-devsecops-engineer.json","meta":{"generated_at":"2026-10-28T16:58:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23058,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58649},"rest":"https://alion.io/mcp/rest/get_company?id=58649"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flam-research-senior-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flam-research-senior-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flam-research-senior-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lam-research-senior-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flam-research-senior-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3307079}},{"tool":"search_jobs","arguments":{"company":"lamresearch.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3307079},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}