Information Security Engineer; Application Security

In your career, let's prove what's possible.

At Lam Research, we create equipment that drives technological advancements in the semiconductor industry. Our innovative solutions enable chipmakers to power progress in nearly all aspects of modern life, and it takes each member of our team to make it possible.
Across our organization, our employees come to work and change the world. We take on the toughest challenges with precision and accuracy. We push for the next big semiconductor breakthrough. We lead the way in one of the most critical and fast-moving industries on the planet. And we do it together, with deep connections and limitless collaboration.
The impact we have on the world is made possible by focusing on our people. So we recognize and celebrate our teams’ achievements. We strive to create an inclusive and diverse culture where everyone’s contribution and voice has value. We evaluate and evolve our offerings, so our people receive the support and empowerment to do meaningful things for their lives, careers, and communities.
Because at Lam, we believe that when people are the priority and they’re inspired to unleash the power of innovation for a better world together, anything is possible.

Date:
Aug 28, 2026

Location:

Fremont, CA, US, 94538

Worker Category:
Virtual Flex

This position will be part of Lam Information Security's Application Security team, supporting Secure SDLC, product security, application risk assessments, threat modeling, vulnerability validation, penetration testing, and AI-related security initiatives across Lam-developed applications and AI-enabled solutions.

This position will increase Lam’s Application Security and Product Security capacity by helping scale Secure SDLC reviews, application risk assessments, threat modeling, vulnerability validation, penetration testing, and AI-related security reviews. The role will help reduce security risk earlier in the development lifecycle, improve consistency across Lam-developed applications and AI-enabled solutions, and support engineering teams in delivering secure software with appropriate controls for data, access, AI model usage, logging, and human oversight.

• Support the objectives of the Application Security team by contributing to secure design, Secure SDLC execution, and product security reviews.
• Assist with application risk assessments, secure design reviews, threat modeling, code review, vulnerability assessment, and penetration testing.
• Support the integration and operational use of application security tools, including SAST, SCA and DAST, and other Dev Sec Ops  capabilities in CI/CD pipelines.
• Work with development teams to identify and document security requirements, common application risks, and required controls based on application risk level, data sensitivity, exposure, and system interconnections.
• Help engineering teams interpret and apply secure coding standards, OWASP guidance, internal Secure SDLC requirements, and product security best practices.
• Assist in reviewing AI-related security risks, including prompt injection, insecure model/tool integration, data leakage, excessive autonomy, insecure AI outputs, model sourcing, sensitive data exposure, and lack of human-in-the-loop controls.
• Participate in AI-related security initiatives, including secure AI model usage, AI-assisted development governance, AI-enabled application review, and secure MLOps process improvement.
• Research, evaluate, and help pilot new security capabilities, automation, and AI-assisted App Sec workflows under guidance from senior security engineers.
• Document findings, recommendations, and review outcomes clearly for…