Insider Risk Security Engineer

About the role

The Information Security Insider Risk team is responsible for protecting Lam and its customers' data from risks associated with individuals who have authorized access, while partnering with cross-functional teams to support a variety of additional investigative efforts.

As an Insider Risk Security Engineer at Lam Research, you will play a critical role in helping manage insider risk and build out our insider risk capabilities. You will use sophisticated technology and robust partnerships to enhance our insider risk posture against nation-state actors, negligent and malicious employee activity, and support high-risk populations from potential compromise. This is a security engineering role focused specifically on insider risk and human-risk compromise.

Responsibilities

• Implement and maintain security solutions: Ensure the effective operation, implementation, and troubleshooting of Insider Risk Management (IRM) technologies, policies, and rules across Lam.
• Collaborate with InfoSec and other partners: Work closely with Lam’s Cybersecurity Engineering team and other cross-functional teams, such as IT, HR, and Legal, to define and refine policies that protect sensitive data and ensure IRM implementation is aligned with Lam’s infrastructure and environment.
• Drive continuous improvement: Fine-tune IRM rules and work with Cybersecurity Engineering to fine-tune DLP rules to minimize false positives, while regularly assessing and maturing the Insider Risk Engineering function to identify areas for improvement.
• Be the insider risk technical expert: Serve as an escalation point for colleagues and collaborators, providing guidance and support as needed.
• Reporting and metrics: Contribute to regular management reporting, offering insights into the performance and effectiveness of the IRM ecosystem. Must be able to maintain confidentiality and always use sound discretion and judgment.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Information Technology, Counterintelligence, or related discipline.
• 5+ years of experience as a security engineer, familiar with typical DLP and UEBA tools.
• Proven experience in implementing, troubleshooting, and administering Insider Risk and DLP technologies in a global enterprise.
• Experience with cloud security and cloud-based applications.
• Excellent problem-solving skills and the ability to work independently.
• Outstanding communication skills, with the ability to collaborate effectively across different teams and stakeholders.

Preferred Qualifications

• Certifications in cybersecurity, such as CISSP, CISM, or CEH.
• Formal education and training in insider risk and/or counterintelligence.
• Knowledge and experience with Microsoft E5 security products and UEBA tools.
• Knowledge of KQL, YARA, Regex, JSON, and Lucene Query Syntax.
• Knowledge of behavioral analysis and psychology.
• Experience within a global semiconductor company or equivalent industry.

Pay

Salary range for this position (California, San Francisco Bay Area): $114,000.00 - $253,000.00. Salary offers will depend on factors that include the location you work from, your level, education, training, specific skills, years of experience, and comparison to other employees already in this role.

Schedule

Lam offers hybrid roles combining on-site collaboration and remote work:

• On-site Flex: Work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week.
• Virtual Flex: Work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.

Benefits

At Lam, we invest in a comprehensive set of outstanding benefits to support employees throughout the phases of their life.