Information Security Engineer (Application Security)
Core
Application Security Engineer supporting Secure SDLC, product security, application risk assessments, threat modeling, vulnerability validation, penetration testing, and AI-related security initiatives.
Role type
Mid-level IC Application Security Engineer
Builds
Secure software and AI-enabled solutions for Lam's applications
Domain
Information Security / Application Security / AI Security
Required skills
Secure SDLC, threat modeling, code review, vulnerability assessment, penetration testing, SAST/DAST/SCA tools, OWASP Top 10, API security, secrets management, CI/CD pipelines, Git, Azure DevOps
Preferred skills
Cloud security, Kubernetes, containers, AI/ML security concepts, generative AI, RAG, AI agents, model governance
Technologies
SAST, DAST, SCA, Git, Bitbucket, Jenkins, Azure DevOps, Artifactory, Kubernetes, Azure
Responsibilities
Support secure design and product security reviews; conduct application risk assessments and threat modeling; integrate security tools into CI/CD pipelines; document security requirements and controls; review AI-related security risks and assist in AI security initiatives; research and pilot new security capabilities; communicate findings to engineering teams.
Seniority
Mid-level, hands-on IC
