Information Security Engineer, Application Security

Lam Research

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Fremont, CA
Salary: $92,000–$211,000 / yr
Posted: 46 days ago
Freshness: Confirmed live today
Closes: Mar 9, 2027
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $176k

This role $152k

$78k $225k

below market most similar roles pay here above market

This role pays less than 62% of similar roles. Most pay $142,500–$208,800 — the blue band above. At the midpoint, this role pays about $152k versus about $176k for comparable roles.

Based on 240 similar postings.

Employer

About Lam Research

Lam Research Corporation is a leading American supplier of wafer-fabrication equipment and services to the global semiconductor industry.

Lam Research currently has 137 open roles on FindRole.

Listed pay typically runs $114,000–$253,000 across 82 roles with salary data.

Most-posted roles

View all roles at Lam Research

At a glance

TL;DR · Information Security Engineer, Application Security

Role Posting Log in to save

The Information Security Engineer (Application Security) joins the Application Security team to support Secure SDLC, product security, and AI-related security initiatives. This role focuses on increasing security capacity by performing threat modeling, vulnerability validation, penetration testing, and application risk assessments across developed applications and AI-enabled solutions. You will work with engineering teams to identify security requirements, interpret secure coding standards like OWASP, and integrate DevSecOps tools including SAST, SCA, and DAST into CI/CD pipelines. Key technical skills include experience with Git, Jenkins, Azure DevOps, and container scanning. You will specifically address technical problems regarding AI security, such as prompt injection, data leakage, and secure MLOps processes, while ensuring appropriate controls for data, access, logging, and human oversight are maintained throughout the software development lifecycle.

Skills

Secure SDLC SAST DAST SCA Threat Modeling CI/CD OWASP MLOps Azure Kubernetes Git Bitbucket Jenkins Artifactory API Security Secrets Management Vulnerability Management Generative AI

What you'll do

Perform application risk assessments, threat modeling, code reviews, and penetration testing.
Execute Secure SDLC reviews and product security assessments for applications and AI-enabled solutions.
Integrate and operate security tools like SAST, SCA, and DAST within CI/CD pipelines.
Identify and document security requirements, risks, and controls based on data sensitivity and system exposure.
Guide engineering teams in applying secure coding standards, OWASP guidance, and internal security requirements.
Review AI-specific risks including prompt injection, data leakage, and model sourcing.
Research and pilot new security capabilities, automation, and AI-assisted AppSec workflows.
Document findings and recommendations for application teams, security leadership, and governance tracking.

What we're looking for

Bachelor’s degree in computer science, Information Security, Information Technology, Engineering, or a related field, or equivalent practical experience.
3+ years of experience in information security, application security, product security, software engineering, DevSecOps, or a related technical field.
Working knowledge of Secure SDLC practices, including threat modeling, secure design review, code review, vulnerability assessment, and security testing.
Familiarity with common application security frameworks and risks, including OWASP Top 10, API security, authentication/authorization, input validation, secrets management, and secure coding practices.
Hands-on or working experience with application security tools such as SAST, DAST, SCA, secrets scanning, container scanning, or vulnerability management platforms.
Basic understanding of CI/CD pipelines and developer tools such as Git, Bitbucket, Jenkins, Azure DevOps, Artifactory, or similar platforms.
Experience supporting security reviews for cloud, product, or manufacturing/engineering software environments (preferred).
Experience with Azure, Microsoft DevOps, Kubernetes, containers, APIs, or modern application architectures (preferred).

Similar roles

Security Engineer, Application Security

Blue Cross Blue Shield Association (BCBSA)

Chicago +1 14 days ago $118,500–$171,825

Application Security DevSecOps SAST DAST SCA Threat Modeling Infrastructure as Code Python Java JavaScript TypeScript Node.js C# Go SQL Bash AWS Azure Kubernetes OpenShift Docker Terraform Bicep Helm GitHub Actions Jenkins Azure DevOps Burp Suite OWASP ZAP Checkmarx Veracode Fortify SonarQube Snyk Prisma Cloud Wiz Tenable Aqua Security Trivy Postman SoapUI HIPAA HITRUST NIST Cybersecurity Framework FedRAMP FISMA FIPS OWASP Top 10 OWASP API Security Top 10 OWASP ASVS

5+ yrs exp Hybrid

Save

Application Security Engineer

Booz Allen Hamilton

Annapolis Junction, MD +1 39 days ago $69,400–$158,000

SAST DAST SCA DevSecOps Secure SDLC Container Security Cloud Security Vulnerability Management OWASP SAMM BSIMM NIST SSDF NIST CSF ISO 27001 MITRE ATT&CK ISO/IEC 42001 IEC 62443

2+ yrs exp

Save

Application Security Engineer

State Street

Quincy, MA +4 60 days ago

DevSecOps AppSec CI/CD SAST DAST SCA Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile API Security Container Security SSDLC

6+ yrs exp

Save

AI Application Security Engineer

Cisco

RTP, NC +1 39 days ago

Generative AI Cloud Security Kubernetes CI/CD GCP AWS Azure SAST DAST SCA Secrets Scanning Threat Modeling Microservices API Security IAM Encryption Network Security OWASP Top 10

6+ yrs exp Hybrid

Save

Senior Product Security Engineer, AI & DevSecOps

McKesson Corporation

Remote (Columbus, OH) +4 21 days ago $140,300–$233,800

DevSecOps AI Security Python TypeScript Java Ruby Kubernetes Terraform CI/CD GitHub Actions Azure DevOps GitLab Jenkins SAST DAST Software Composition Analysis infrastructure-as-code cloud-native Generative AI LLM OWASP Top 10 for LLM NIST AI Risk Management Framework SOC 2 HIPAA SOX NIST CSF ISO 27001

7+ yrs exp Remote

Save

Distinguished Engineer, Application Security

CVS Health

Remote (Arizona) 34 days ago $175,100–$334,750

Application Security SAST DAST SCA IAST RASP ASPM ASOC CI/CD Python Java Go TypeScript JavaScript C# Kubernetes GitHub Actions GitLab CI Jenkins Argo API Security Threat Modeling SBOM SLSA eBPF WAF GraphQL gRPC REST OWASP ASVS NIST SSDF HIPAA PCI DSS HITRUST Service Mesh

10+ yrs exp Remote

Save