Senior DevSecOps Engineer

The group you’ll be a part ofThe Office of the CTO is where innovation takes center stage. We inspire our global technical community to take on grand challenges, understand emerging trends, identify the critical inflections, and drive our sustainability, Environment, Social, and Governance (ESG) practices that will define the next generation of semiconductors and continued impact.

The impact you’ll make Within Semiverse Solutions at Lam Research, we build innovative software products to solve semiconductor technology challenges. Our leading 3D modeling software is revolutionizing the way semiconductor chips are fabricated around the world. Enabled by our core intellectual property – an accelerated 3D voxel modeling and visualization engine – our software is highly successful and is quickly evolving as our business and customer base expand rapidly.

As a Senior Dev Sec Ops  Engineer, you will be part of the Engineering Operations team, owning the security health of our desktop software products, web applications, and development pipelines. You’ll upgrade third-party and open-source dependencies directly in our product code, run automated tests, and troubleshoot compatibility issues. You’ll maintain the security scanning built into our CI/CD pipelines, and you’ll work closely with Product Security Engineers and Application Security Engineers in our central Info Sec organization to guide our products through a Secure Software Development Lifecycle (SDLC).

This is a senior-level position with opportunities for independently driving projects to completion as well as technical career growth.

What you’ll do Remediate vulnerabilities in third-party and open-source dependencies identified by SCA and SAST scans, opening and testing pull requests directly against product code

Run automated test suites and troubleshoot build and compatibility issues caused by dependency upgrades, collaborating with developers when deeper product expertise is needed

Reduce outstanding security exceptions by identifying upgrade paths, replacement components, or mitigations for vulnerable dependencies

Maintain and improve SAST, SCA, and DAST scanning and its integration into CI/CD pipelines, including scan templates, quality gates, and policies

Generate and maintain Software Bills of Materials (SBOMs) and support vulnerability tracking and handling for released products

Serve as the primary point of contact between Engineering and Info Sec, coordinating risk assessments, architecture and infrastructure reviews, and security exception requests by gathering inputs from development teams and tracking reviews through to approval

Partner with Application Security Engineers on DAST and penetration testing, helping developers interpret findings and track remediation

Who we’re looking forTeam player who enjoys supporting and working with others

Systematic work style and excellent attention to detail

Bachelor’s degree in Computer Science or a related field with at least 8 years of professional experience, a Master’s degree with at least 6 years, or an Associate degree or equivalent technical background with at least 10 years, in software engineering, Dev Ops, or application security

Proficient with Git and source code management platforms, such as Bitbucket, Git Hub, or Azure Repos Proficient in both Windows and Linux environments

Strong Python skills, including dependency management (pip, virtual environments, requirements and lock files) and reading and modifying production code Proficient with CI/CD tools, such as Jenkins, Azure Dev Ops, or Git Hub Actions Proven experience upgrading third-party dependencies in an existing codebase and resolving the resulting build, API, and test failures

Hands-on experience with SCA and SAST tools,…