Information Security VM Analyst

Lam Research•Tualatin, OR

2d•Hybrid

About The Position

As a Vulnerability Management Analyst at Lam Research, you will play an important role in supporting and executing our vulnerability management program. This position is well-suited for someone with a strong foundation in the vulnerability management lifecycle and reporting, who is motivated to contribute to and continuously enhance our overall security posture. You will work across on-premises, application, and cloud environments, helping identify, assess, and manage vulnerabilities while collaborating with teams to drive effective remediation. A successful candidate will be comfortable working independently while also partnering closely with cross-functional teams. This role benefits from a solid understanding of modern threat landscapes, including common attacker techniques and frameworks such as OWASP Top 10, SANS Top 25, and MITRE ATT&CK. You will apply this knowledge to help prioritize risks, support mitigation efforts, and strengthen the overall program. As part of a globally distributed organization, you will collaborate with teams across regions, including India, Japan, and the United States, contributing to a cohesive and consistent approach to vulnerability management. More broadly, this role also contributes to risk management and compliance efforts, helping ensure security standards are met while supporting ongoing improvements to the organization’s overall security capabilities.

Requirements

Knowledge of information security industry and regulatory obligations (ISO 27000-series, NIST Framework, etc.)
Experience with data analytics with the ability to provide qualitative analysis and recommendations.
Ability to develop strong working relationships with a variety of other enabling teams.
Strong attention to detail, data accuracy, and data analysis
Self-motivated and operates with a high sense of urgency and a high level of integrity.
Ability to automate technical tasks using API or scripting.
Strong verbal and written communication skills.

Nice To Haves

Experience with scanning tools such as Microsoft Defender, Tenable, Rapid7 and Qualys and their configurations is preferred.
Certified in one of the security certifications like CEH/CISSP/OSCP
Bachelor’s degree in computer science, Information Technology, Cyber Security, or related discipline
7+ years of Cybersecurity experience with a concentration in vulnerability management
Understanding of a variety of technical concepts such as Networking, systems administration, application development, and information security practices

Responsibilities

Lead and support the delivery of our internal cybersecurity vulnerability management program.
Guide the overall strategy while ensuring effective execution of vulnerability assessment and remediation efforts across the organization.
Work closely with cross-functional teams to identify, assess, and prioritize vulnerabilities, helping to reduce risk in a way that aligns with the organization’s environment and business needs.
Evaluate new vulnerabilities, understand their potential impact, and recommend practical mitigation approaches.
Contribute to impact assessments and help ensure appropriate monitoring and coverage, while providing technical insights and recommendations to strengthen the program.
Review scan results, research remediation options, and validate outcomes, with a focus on both infrastructure and cloud environments.
Develop and implement automation and workflow enhancements to reduce manual effort and increase efficiency.
Bring a solid foundation in vulnerability management practices, including triage, prioritization, remediation, and threat modeling.
Partner with IT and engineering teams to address aging vulnerabilities and drive timely remediation.
Establish regular communication and stakeholder engagement to maintain focus and accountability.
Support the development of program metrics and reporting, helping translate technical findings into clear, business-relevant insights.
Communicate risks and opportunities for improvement in a meaningful and actionable way.