Cybersecurity Engineer - DLP Firewall

Cybersecurity Engineer - Firewall with DLP

The Global Information Systems Group is dedicated to the success of Lam through providing best-in-class and innovative information system solutions and services. Together, we support users globally with data, information, and systems to achieve their business objectives.

Lam Research is looking for a Cybersecurity Engineer to join our growing team. The Cybersecurity Engineer is responsible for performing services and activities to support various Information Security program deliverables. This role will focus technically on Palo Alto Networks firewalls, developing and testing Azure enterprise Data Loss Prevention and supporting Global Information Systems and Incident Response in troubleshooting and investigations as appropriate.

The Cybersecurity Engineer also supports the information security team in safeguarding Lam’s information system infrastructure and associated business system, Operational Technology (OT) environments, and engineering/manufacturing environments.

What You’ll Do

• Design, implement, and manage Palo Alto Networks firewall solutions to protect the organization’s network infrastructure
• Analyze Lam Research business objectives and security strategy and develop supporting firewall (Palo Alto Networks) and DLP rules
• Enforce data loss prevention policies across the company using technical preventive controls
• Provide technical support and guidance to team members and stakeholders on security-related issues.
• Stay up-to-date with the latest security trends, threats, and technologies to continuously improve the organization's security posture.
• Define, develop, and execute processes to update keywords in partnership with Legal (DLP)
• Identify gaps in controls, processes, systems and recommend solutions
• Partner with GIS and Incident response to tune the content detection rules to improve accuracy
• Support local leadership in the region on any information security issues, workloads or strategies
• Participate in cross-functional projects in both advisory and hands-on roles representing Information Security interests
• Create and maintain standards and procedures and train Info Sec, GIS and business unit support staff on them
• Support security investigations in various systems directly or through service providers and maintain confidentiality

Who We’re Looking For

• Solid foundation in technical domains such as:
  Networking, firewalls, systems administration, cloud computing and information security best practices
• Hands-on experience with Palo Alto Networks firewalls and Data Loss Prevention tools, including policy tuning and documenting supporting procedures and processes
• Hands-on Experience with one or more DLP solutions such as Netskope or Intune
• Have experience with reviewing and responding to DLP alerts
• Strong verbal and written communication skills
• Ability to communicate effectively, both verbal and written to a variety of audiences (immediate team, management, other business units)
• A self-motivated person that can use their creative and experience-driven analytical skills to solve problems and do analysis
• Bachelor’s degree or Advanced Degree in Computer Science, Information Technology, Cybersecurity, or related discipline
• 5+ years of experience in an Information Security role, focusing on enterprise firewall management
• 2+ years of experience in designing, implementing, and managing Palo Alto Networks firewall solutions
• 1+ years of experience developing, reviewing, and responding to DLP alerts
• At least one of the following processional certifications required:
  Security+, CISSP, CISA, CISM, CEH, OSCP, GMON

Preferred Qualifications

• Experience with in a global semiconductor company or equivalent industry experience preferred
• Ability to break down and understand complex problems, develop innovative plans to address them
• Strong people and team/relationship building skills, work with cross functional global teams
• Knowledge and experience with Microsoft E5 security products (MDATP, MCAS, inTune, phishing, etc.)
• Knowledge and familiarity of networking fundamentals (TCP/IP, DNS, Switches, Routers, RADIUS/TACACS+, etc.)
• Knowledge and experience with security infrastructure (Firewalls,…