This role pays more than
60%
of similar roles. Most pay
$151,475–$209,500
— the shaded band above.
At the midpoint, this role pays about
$184k
versus about
$180k
for comparable roles.
Based on 240 similar postings.
Employer
About Lam Research
Lam Research Corporation is a leading American supplier of wafer-fabrication equipment and services to the global semiconductor industry.
Lam Research currently has
299 open roles
on FindRole.
Listed pay typically runs
$114,000–$253,000
across 141 roles with salary data.
The Insider Risk Security Engineer joins the Information Security Insider Risk team to protect data from risks associated with individuals who have authorized access. This role focuses on building insider risk capabilities by driving tooling requirements to identify anomalous user activities and indicators while providing support during active incidents. The engineer will implement, maintain, and troubleshoot Insider Risk Management technologies and Data Loss Prevention rules to minimize false positives. Key responsibilities include collaborating with IT, HR, and Legal teams to refine policies and provide technical expertise as a primary escalation point. Candidates should possess experience with DLP and UEBA tools, cloud security, and Microsoft E5 products. Preferred technical skills include KQL, YARA, Regex, JSON, and Lucene Query Syntax. The role addresses the specific challenge of protecting against nation-state actors and malicious employee activity.
Implement, maintain, and troubleshoot Insider Risk Management (IRM) technologies and policies across the organization.
Define and refine security policies in coordination with IT, HR, and Legal teams.
Fine-tune IRM and Data Loss Prevention (DLP) rules to minimize false positives.
Develop innovative use cases to detect anomalous user activities and indicators of risk.
Provide technical expertise and guidance as the primary escalation point for insider risk issues.
Analyze security trends and metrics to provide insights into the performance of the IRM ecosystem.
Support active incidents and investigate risks from nation-state actors or malicious employee activity.
What we're looking for
Bachelor's degree in Computer Science, Cybersecurity, Information Security, IT, Counterintelligence, or a related discipline.
5+ years of experience as a security engineer familiar with DLP and UEBA tools.
Proven experience implementing, troubleshooting, and administering Insider Risk and DLP technologies in a global enterprise.
Experience with cloud security and cloud-based applications.
Excellent problem-solving skills and the ability to work independently.
Outstanding communication skills for collaborating across different teams and stakeholders.
Certifications such as CISSP, CISM, or CEH (preferred).
Formal training in insider risk/counterintelligence, knowledge of Microsoft E5 products, KQL, YARA, Regex, JSON, Lucene, behavioral analysis, or semiconductor industry experience (preferred).
Silverfort
Microsoft Defender for Identity
Microsoft Defender for Endpoint
Microsoft Defender for Cloud
Microsoft Purview
Netskope
Palo Alto Networks
Imperva
Perception Point
Microsoft Intune
Security Copilot
IAM
DLP
EPM
WAF
CSPM
SIEM
SOAR
Vulnerability Management