Job description

The group you’ll be a part of The Global Information Systems Group is dedicated to the success of Lam through providing best-in-class and innovative information system solutions and services. Together, we support users globally with data, information, and systems to achieve their business objectives. What you’ll do Lam Research is looking for a Security Engineer to join our team. The Cloud Security Engineer is responsible for the engineering, operationalization, and continuous improvement of Microsoft Defender for Endpoint (MDE) and Microsoft Defender for Identity (MDI) capabilities across the enterprise. This role will take ownership of existing MDI/MDE capabilities, driving security posture improvement, platform governance, and cross-functional alignment with SOC, GIS, and infrastructure teams. Job Responsibilities: • Own end-to-end engineering and lifecycle management for Microsoft Defender for Endpoint (MDE) and Microsoft Defender for Identity (MDI). • Maintain and enhance platform configurations aligned with Microsoft best practices and Lam security standards. • Drive continuous improvement of detection, prevention, and response capabilities. • Perform security reviews and architecture assessments of cloud solutions to identify gaps and recommend mitigation strategies. • Develop KPIs and executive reporting metrics to measure cloud security program effectiveness and communicate outcomes to leadership. • Lead roadmap. • Develop and execute remediation plans for misconfigurations, coverage gaps, and security findings. • Partner with internal and external stakeholders. Who we’re looking for • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, with a minimum of 15 years of related experience, 12 years of related experience with a Master’s degree, 8 years of related experience with a PhD, or an equivalent combination of education and experience. • 7+ years of experience in an Information Security role. • Strong understanding of Active Directory/identity security, Endpoint security, RBAC, and access governance. • Experience integrating with Microsoft Intune and SIEM/SOAR. • Strong vulnerability management fundamentals. • At least one of the following professional certifications required: Security+, CISSP, CISA, CISM, CEH, OSCP, or GMON. • Ability to communicate effectively, both verbal and written to a variety of audiences (immediate team, management, other business units) to provide guidance and direction when resolving technical challenges. • Solid foundation in Information Security Engineering with deep hands-on experience in Azure security. • Experience in one or more of the following tools: Defender for Endpoint, Defender for Identity. Preferred qualifications • Experience within a global semiconductor company or equivalent industry experience preferred. • Ability to break down and understand complex problems and develop innovative ways to address them. • Strong people and team/relationship building skills, work with cross functional global teams. Our commitment We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results. Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees. Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories – On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time. #LI-DM1 Salary CA San Francisco Bay Area Salary Range for this position: $137,000.00 - $287,000.00. The above salary range for this position is relevant to applicants that reside or work onsite in the California, San Francisco Bay Area only. Salary offers will depend on factors that include the location you work from, your level, education, training, specific skills, years of experience and comparison to other employees already in this role. Actual salary may vary from salary offered due to numerous factors including but not limited to unpaid time off, unpaid leave, company mandated shutdown, and other relevant factors. Our Perks and Benefits At Lam, our people make amazing things possible. That’s why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.

Requirements

Must-haves

The group you’ll be a part of
What you’ll do
Own end-to-end engineering and lifecycle management for Microsoft Defender for Endpoint (MDE) and Microsoft Defender for Identity (MDI).
Maintain and enhance platform configurations aligned with Microsoft best practices and Lam security standards.
Drive continuous improvement of detection, prevention, and response capabilities.
Perform security reviews and architecture assessments of cloud solutions to identify gaps and recommend mitigation strategies.
Develop KPIs and executive reporting metrics to measure cloud security program effectiveness and communicate outcomes to leadership.
Lead roadmap.
Develop and execute remediation plans for misconfigurations, coverage gaps, and security findings.
Partner with internal and external stakeholders.
Who we’re looking for
7+ years of experience in an Information Security role.
Strong understanding of Active Directory/identity security, Endpoint security, RBAC, and access governance.
Experience integrating with Microsoft Intune and SIEM/SOAR.
Strong vulnerability management fundamentals.
At least one of the following professional certifications required: Security+, CISSP, CISA, CISM, CEH, OSCP, or GMON.
Ability to communicate effectively, both verbal and written to a variety of audiences (immediate team, management, other business units) to provide guidance and direction when resolving technical challenges.
Solid foundation in Information Security Engineering with deep hands-on experience in Azure security.
Experience in one or more of the following tools: Defender for Endpoint, Defender for Identity.

Nice-to-haves

Experience within a global semiconductor company or equivalent industry experience preferred.
Ability to break down and understand complex problems and develop innovative ways to address them.
Strong people and team/relationship building skills, work with cross functional global teams.
Our commitment
We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azurerest

Platform: eightfold
Effort: medium

Benefits

Benefits detected in the listing.

Paid Time Off