Information Security VM Analyst

Job Summary As a Vulnerability Management Analyst at Lam Research, you will play an important role in supporting and executing our vulnerability management program. This position is well-suited for someone with a strong foundation in the vulnerability management lifecycle and reporting, who is motivated to contribute to and continuously enhance our overall security posture. You will work across on-premises, application, and cloud environments, helping identify, assess, and manage vulnerabilities while collaborating with teams to drive effective remediation. A successful candidate will be comfortable working independently while also partnering closely with cross-functional teams. This role benefits from a solid understanding of modern threat landscapes, including common attacker techniques and frameworks such as OWASP Top 10, SANS Top 25, and MITRE ATT&CK. You will apply this knowledge to help prioritize risks, support mitigation efforts, and strengthen the overall program. As part of a globally distributed organization, you will collaborate with teams across regions, including India, Japan, and the United States, contributing to a cohesive and consistent approach to vulnerability management. More broadly, this role also contributes to risk management and compliance efforts, helping ensure security standards are met while supporting ongoing improvements to the organization’s overall security capabilities. Job Responsibilities In this role, you will lead and support the delivery of our internal cybersecurity vulnerability management program. You will help guide the overall strategy while ensuring effective execution of vulnerability assessment and remediation efforts across the organization. You will work closely with cross-functional teams to identify, assess, and prioritize vulnerabilities, helping to reduce risk in a way that aligns with the organization’s environment and business needs. This includes evaluating new vulnerabilities, understanding their potential impact, and recommending practical mitigation approaches. You will contribute to impact assessments and help ensure appropriate monitoring and coverage, while providing technical insights and recommendations to strengthen the program. The role also involves reviewing scan results, researching remediation options, and validating outcomes, with a focus on both infrastructure and cloud environments. As part of continuous improvement, you will help develop and implement automation and workflow enhancements to reduce manual effort and increase efficiency. You will also bring a solid foundation in vulnerability management practices, including triage, prioritization, remediation, and threat modeling. Strong collaboration will be key, as you will partner with IT and engineering teams to address aging vulnerabilities and drive timely remediation. You will also help establish regular communication and stakeholder engagement to maintain focus and accountability. In addition, you will support the development of program metrics and reporting, helping translate technical findings into clear, business-relevant insights. Communicating risks and opportunities for improvement in a meaningful and actionable way will be an important part of the role. Who we’re looking for Knowledge of information security industry and regulatory obligations (ISO 27000-series, NIST Framework, etc.) Experience with scanning tools such as Microsoft Defender, Tenable, Rapid7 and Qualys and their configurations is preferred. Certified in one of the security certifications like CEH/CISSP/OSCP Experience with data analytics with the ability to provide qualitative analysis and recommendations. Ability to develop strong working relationships with a variety of other enabling teams. Strong attention to detail, data accuracy, and data analysis Self-motivated and operates with a high sense of urgency and a high level of integrity. Ability to automate technical tasks using API or scripting. Strong verbal and written communication skills. Preferred qualifications Bachelor’s degree in computer science, Information Technology, Cyber Security, or related discipline 7+ years of Cybersecurity experience with a concentration in vulnerability management Understanding of a variety of technical concepts such as Networking, systems administration, application development, and information security practices Our commitment We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results. Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees. Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories – On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time. Our Perks and Benefits At Lam, our people make amazing things possible. That’s why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.