Insider Threat Security Engineer 5

The Global Resilience, Security and Transformation/InfosecGroup is dedicated to the success of Lam through providing best-in-class and innovative information system solutions and services. Together, we support users globally with data, information, and systems to achieve their business objectives.

As an Insider Threat Security Engineer at Lam Research, you will play a critical role in helping manage insider threat and helping to build out our insider threat capabilities. Your responsibilities will include driving tooling requirements to determine anomalous user activities, indicators, and providing support to active incidents alongside our most valuable stakeholders. You may be asked to support cross-functional opportunities across Lam Research to help identify security trends and metrics, develop innovative use cases designed to detect anomalous events, and support education and awareness campaigns for insider risk and threat. You will use sophisticated technology and robust partnerships to enhance our insider risk posture against nation-state actors, negligent and malicious employee activity, and support high-risk populations from potential compromise. You will play a vital role in taking the Lam Research Insider Threat program to the next level by levering both, your critical thinking and technical expertise.

• Implement and Maintain Security Solutions: Ensure the effective operation, implementation, and troubleshooting of Insider Risk Management (IRM) technologies, policies, and rules across Lam.
• Collaborate with InfoSec & Other Partners: Work closely with Lam's Cybersecurity Engineering team and other cross-functional teams, such as IT, HR, and Legal- to define and refine policies that protect sensitive data and to ensure IRM implementation is in line with Lam's infrastructure and environment.
• Drive Continuous Improvement: fine tune IRM rules and work with Cybersecurity Engineering to fine tune DLP rules to minimize false positives, while regularly assessing and maturing the Insider Threat Engineering function to identify areas of improvement.
• Be the Insider Threat Technical Expert: Serve as an escalation point for colleagues and collaborators, providing guidance and support as needed.
• Reporting & Metrics: Contribute to regular management reporting, offering insights on the performance and effectiveness of the IRM ecosystem.
• *Must be able to maintain confidentiality and always use sound discretion and judgment*

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Technology, Counterintelligence, or related discipline.
• 5+ years of experience as a security engineer in an Insider Threat role.
• Proven experience in implementing, troubleshooting, and administering Insider Threat and DLP technologies in a global enterprise.
• Experience with cloud security and cloud-based applications.
• Excellent problem-solving skills and the ability to work independently.
• Outstanding communication skills, with the ability to collaborate effectively across different teams and stakeholders.

Preferred Qualifications

• Certifications in cybersecurity, such as CISSP, CISM, or CEH.
• Formal education and training in insider threat and counterintelligence.
• Knowledge and experience with Microsoft E5 security products, specifically Purview DLP, IRM, and Defender.
• Experience with data analytics and visualization tools.
• Knowledge of behavioral analysis and psychology.
• Experience within a global semiconductor company or equivalent industry experience preferred.
• Ability to breakdown and understand complex problems and the ability to develop a plan and innovative ways to address them.

We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.

Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.

Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories - On-site Flex and Virtual Flex. 'On-site Flex' you'll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. 'Virtual Flex' you'll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.

IND123 #LI-FC1 #LI-Hybrid