Information Security Engineer (Application Security) - US-CA-Fremont (1003), United States
$92,000 - $211,000 USD weekly
Originally posted 1 July 2026 by the employer.
About the role
This position is part of Lam Information Security’s Application Security team, supporting Secure SDLC, product security, application risk assessments, threat modeling, vulnerability validation, penetration testing, and AI-related security initiatives across Lam-developed applications and AI-enabled solutions.
What you'll do
- Support secure design, Secure SDLC execution, product security reviews, application risk assessments, threat modeling, and code review. - Support the integration and operational use of application security tools, including SAST, SCA, and DAST, and other DevSecOps capabilities in CI/CD pipelines. - Work with development teams to identify and document security requirements, common application risks, and required controls based on application risk level, data sensitivity, and system interconnections. - Assist engineering teams with applying secure coding standards, OWASP guidance, internal Secure SDLC requirements, and product security practices. - Review AI-related security risks, including prompt injection, insecure model/tool integration, data leakage, excessive autonomy, and insecure AI outputs. - Participate in AI-related security initiatives, including secure AI model usage, AI-assisted development governance, and secure MLOps process improvement.
What you'll need
- Bachelor’s degree in Computer Science, Information Security, Information Technology, Engineering, or a related field, or equivalent practical experience. - 3+ years of experience in information security, application security, product security, software engineering, DevSecOps, or a related technical field. - Working knowledge of Secure SDLC practices, including threat modeling, secure design review, code review, vulnerability assessment, and security testing. - Familiarity with common application security frameworks and risks, including OWASP Top 10, API security, authentication/authorization, input validation, and secrets management. - Hands-on or working experience with application security tools such as SAST, DAST, SCA, secrets scanning, container scanning, or vulnerability management platforms. - Basic understanding of CI/CD pipelines and developer tools such as Git, Bitbucket, Jenkins, Azure DevOps, Artifactory, or similar platforms.
Nice to have
- Experience supporting security reviews for cloud, product, or manufacturing/engineering software environments. - Experience with Azure, Microsoft DevOps, Kubernetes, containers, APIs, or modern application architectures. - Exposure to AI/ML security concepts, including generative AI, RAG, AI agents, model governance, prompt injection, and secure MLOps. - Familiarity with security requirements for AI-enabled applications, including approved model usage, data minimization, access control, logging, monitoring, and human oversight. - Experience helping engineering teams remediate application vulnerabilities and validate fixes. - Security certifications such as Security+, CSSLP, CISSP, GIAC, or similar.
Skills: application security, secure SDLC, DevSecOps, CI/CD pipelines, AI-enabled solutions, security risks
This role has been open 112 days — well below the 158-day median for Software Engineering Semiconductor roles.
Software Engineering Semiconductor · Infrastructure Platform
|
Open roles in category
44
|
Median days open
158 d
|
Median salary
$212k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | Lam Research | All employers we track in this specialty (44 roles · 20 employers) |
|---|---|---|
| Open roles in this specialty | 3 | 44 |
| Open roles in the wider Software, Firmware & Systems family | 81 | 6296 · 145 employers |
| Median days open | 196 d | 158 d (+38 d vs this employer) |
| Median salary (USD postings) | — | $212k |
Skills observed across this category: application security, secure SDLC, DevSecOps, CI/CD pipelines, AI-enabled solutions, security risks
Who's hiring in this category
- Applied Materials · 9 open roles · median 180 d
- KLA Corporation · 6 open roles · median 151 d
- NVIDIA · 4 open roles · median 182 d
- Infineon Technologies · 3 open roles · median 135 d
- Lam Research (this employer) · 3 open roles · median 196 d
- Analog Devices · 2 open roles · median 46 d
How we counted: 44 open Software Engineering Semiconductor (Infrastructure Platform) roles from 20 employers tracked in the SemiconductorJobs index, counted 22 Oct 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there — it is counted in the wider Software, Firmware & Systems family row. Figures refresh nightly.