Information Security Risk Analyst

Lam Research Salzburg GmbH; Tualatin (OR); On-site; USD 90,000 - 120,000; Full time

Job summary

Lam Research is seeking an Information Security Risk Analyst in Tualatin, OR. The role focuses on identifying and improving detection capabilities, correlating threats, and reducing false positives across security operations.

You will collaborate with Incident Response, Vulnerability Management, and SOC teams to enhance coverage and response effectiveness. The ideal candidate will have hands-on experience with SIEM platforms, threat intelligence, and AI-assisted analytics, applying MITRE ATT&CK

Qualifications

• Experience in security operations and threat detection development.
• 1

Responsibilities

• Develop, test, tune, and maintain SIEM detection rules, log correlation searches, alerts, dashboards, and analytics.

Skills

Threat detection analysis

Threat hunting

Security analytics

UEBA

SIEM analysis

Log analysis

Education

Bachelor's degree in Computer Science or related field

Security certifications (CISSP, GCIA, GCFA, GMON, or equivalent)

Tools

Microsoft Sentinel

Splunk

Exabeam / Securonix

Azure/AWS/GCP monitoring

Python/PowerShell scripting

Job description

In your career, let’s prove what’s possible.

At Lam Research, we create equipmentthat drives technological advancements in the semiconductor industry. Our innovative solutions enable chipmakers to power progress in nearly all aspects of modern life, and it takes each member of our team to make it possible.

Across our organization, our employees come to work and change the world. We take on the toughest challenges with precision and accuracy. We push for the next big semiconductor breakthrough. We lead the way in one of the most critical and fast-moving industries on the planet. And we do it together, with deep connections and limitless collaboration.

The impact we have on the world is made possible by focusing on our people. So we recognize and celebrate our teams’ achievements. We strive to create an inclusive and diverse culture where everyone’s contribution and voice has value. We evaluate and evolve our offerings, so our people receive the support and empowerment to do meaningful things for their lives, careers, and communities.

Because at Lam, we believe that when people are the priority and they’re inspired to unleash the power of innovation for a better world together, anything is possible.

Information Security Risk Analyst

Date: Jul 5, 2026

Location: Tualatin, OR, US, 97062

Worker Category: Virtual Flex

Job Summary

The Cyber Threat Analytics Analyst is responsible for identifying, developing, and improving the organization’s ability to detect malicious behavior, suspicious activity, and security anomalies across the enterprise. This role is part Information Security team focused on bringing detection development, threat analysis operationalization, SIEM correlation, behavioral analytics, and AI-assisted threat detection capabilities into the organization. The analyst will work closely with Security Operations, Incident Response, and Vulnerability Management teams to improve detection coverage, reduce false positives, and identify threats that may bypass traditional controls.

Job Responsibilities

• Develop, test, tune, and maintain SIEM detection rules, log correlation searches, alerts, dashboards, and analytics.
• Translate threat intelligence, adversary tactics, and emerging attack trends into actionable detections.
• Build and improve analytics to identify malicious behavior, compromised accounts, lateral movement, and anomalous activity.
• Use AI-driven analytics, UEBA, and behavioral baselining to identify activity that deviates from normal user, endpoint, network, cloud, and application behavior.
• Map detection content to MITRE ATT&CK tactics and techniques to identify coverage strengths and gaps.
• Partner with SOC analysts to improve alert triage, investigation playbooks, enrichment, and escalation criteria.
• Support Incident Response during active investigations by analyzing logs, identifying patterns, and developing new detections from lessons learned.
• Identify gaps in logging, telemetry, and visibility and recommend improvements to security monitoring coverage.
• Document detection logic, assumptions, data sources, expected behavior, response guidance, and tuning decisions.
• Track detection effectiveness, alert fidelity, false positive rates, detection coverage, and time-to-detect improvements.

Who We’re Looking For

We are looking for an analytical and curious cybersecurity professional who enjoys finding patterns in large volumes of security data. The ideal candidate understands how attackers operate, how enterprise systems generate security telemetry, and how to turn threat intelligence into meaningful detections. The right person for this role should be comfortable working across SIEM data, endpoint telemetry, identity logs, cloud activity, email security events, network data, and behavioral analytics platforms. They should be able to think like an attacker, understand normal business behavior, and identify signals that indicate suspicious or malicious activity.

Strong candidates will have experience in one or more of the following areas:

• Security Operations Center analysis
• Threat hunting
• Detection tuning
• Behavioral analytics or UEBA
• Cloud, endpoint, identity, or network security monitoring

Preferred Qualifications

• Experience with SIEM platforms such as Microsoft Sentinel, Splunk, Exabeam, Securonix, or similar tools.
• Familiarity with Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Microsoft Sentinel, Entra ID, or similar security platforms.
• Understanding of MITRE ATT&CK and common adversary tactics, techniques, and procedures.
• Experience using threat intelligence to create detections and threat hunting hypotheses.
• Experience with AI-assisted analytics, UEBA, anomaly detection, or behavioral baselining.
• Familiarity with cloud security monitoring across Azure, AWS, or Google Cloud.
• Ability to analyze logs from identity systems, endpoints, firewalls, proxies, email gateways, SaaS applications, and cloud platforms.
• Experience documenting detection logic, investigation steps, and response guidance.
• Scripting or automation experience with Python, PowerShell, Logic Apps, or similar tools.
• Familiarity with MISP, STIX/TAXII, threat intelligence feeds, or indicator management.
• Certifications such as GCIH, GCIA, GCDA, GMON, GCTI, GCFA, Security+, CySA+, CISSP, or equivalent experience.

Our commitment

We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.

Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories – On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.

Our Perks and Benefits

At Lam, our people make amazing things possible. That’s why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.

Nearest Major Market: Portland Oregon
Job Segment: Information Security, SQL, Database, Information Systems, Technology, Research