Insider Risk Analyst

LAM RESEARCH Corporation; Fremont (CA); Hybrid; USD 92.000 - 211.000; Vollzeit

Zusammenfassung

Lam Research is seeking an Insider Risk Analyst to manage investigations and help build our insider risk capabilities. You will analyze anomalous user activity, coordinate with stakeholders, and help develop detection and prevention controls across Lam’s environment.

The role requires 3+ years in insider risk, experience with log analysis, and proficiency in UEBA, UAM, and DLP tools. We value strong communication, fast learning, and the ability to operate in a dynamic setting.

Qualifikationen

• Bachelor’s or advanced degree in Cybersecurity, Information Security, Counterintelligence, or a related field.
• 3+ years of Insider Risk experience.
• Experience conducting Insider Risk investigations and analysis beyond alert triage.
• Ability to interpret system, network, and application logs and identify anomalies.
• Proficiency with security tools including UEBA, UAM, DLP.

Aufgaben

• Drive triage, investigation, and support management of insider risk cases.
• Identify, collect, and analyze indicators from a variety of sources.
• Coordinate investigation and mitigation strategies with Insider Risk team’s management and colleagues, as well as additional internal stakeholders.
• Leverage analytical and technical skills to identify patterns and trends and make recommendations to enhance detective and preventive controls.
• Perform log analysis and coordinate/perform event queries across enterprise systems.
• Operationalize and maintain the processes and playbooks required for insider risk analysis and support the development and execution of any new processes and playbooks.
• Leverage subject matter expertise to educate stakeholders on the importance of data and information sharing to protect and enable the business.
• Ensure investigative findings are documented, as needed.
• Support process improvement initiatives and provide project related support for the Insider Risk program.
• Respond to requests for ad-hoc support, reporting, and research topics from management and stakeholders, as required.
• Must be able to maintain confidentiality and always use sound discretion and judgment.

Kenntnisse

Analytical thinking

Critical thinking

Communication skills

Self-motivated problem solver

Fast learner

Ausbildung

Bachelor’s or advanced degree in Cybersecurity, Information Security, Counterintelligence, or related field

Counterintelligence coursework

Tools

UEBA

UAM

DLP platforms

Jobbeschreibung

The group you’ll be a part of

The Information Security Insider Risk team is responsible for protecting the data of Lam and its customers from risks related to those with authorized access while partnering with cross functional teams to assist with a variety of additional investigative efforts.

The impact you’ll make

As an Insider Risk Analyst at Lam Research, you will play a critical role in helping manage insider risk investigations and helping to build out our insider risk capabilities. Your responsibilities will include analyzing and investigating anomalous user activities, indicators, and providing support to active incidents alongside our most valuable stakeholders. You may be asked to support cross-functional opportunities across Lam Research to help identify security trends and metrics, develop innovative use cases designed to detect anomalous events, and support education and awareness campaigns for insider risks and threats. You will use sophisticated technology and robust partnerships to enhance our insider risk posture against nation-state actors, negligent and malicious employee activity, and support high-risk populations from potential compromise. You will play a vital role in taking the Lam Research Insider Risk program to the next level by being both an analytical and technical expert on our team.

What you’ll do

• Drive triage, investigation, and support management of insider risk cases.
• Identify, collect, and analyze technical and non-technical indicators from a variety of sources.
• Coordinate investigation and mitigation strategies with Insider Risk team’s management and colleagues, as well as additional internal stakeholders.
• Leverage your analytical and technical skills to identify patterns and trends and make recommendations to enhance detective and preventive controls.
• Perform log analysis and coordinate/perform event queries across enterprise systems.
• Operationalize and maintain the processes and playbooks required for insider risk analysis and support the development and execution of any new processes and playbooks.
• Leverage subject matter expertise to educate stakeholders on the importance of data and information sharing to protect and enable the business.
• Ensure investigative findings are documented, as needed.
• Support process improvement initiatives and provide project related support for the Insider Risk program.
• Respond to requests for ad-hoc support, reporting, and research topics from management and stakeholders, as required.
• Must be able to maintain confidentiality and always use sound discretion and judgment.

Who we’re looking for

• Bachelor’s or advanced degree in Cybersecurity, Information Security, Counterintelligence, or a related field.
• 3+ years of Insider Risk experience.
• Experience conducting Insider Risk investigations and providing analysis beyond alert triage.
• Ability to interpret system, network, and application logs and identify anomalies.
• Skilled in querying and analyzing unstructured log data to detect complex behavioral patterns.
• Experience monitoring, investigating, and responding to security alerts.Understanding of malicious insider risk indicators, including intellectual property theft, sabotage, and espionage.
• Proficiency with security tools, including UEBA, UAM, and DLP platforms.
• Knowledge of investigation methodologies and the ability to recommend best practices to stakeholders.
• Strong written and verbal communication skills, with the ability to engage effectively with team members, stakeholders, and senior leadership.
• Quick learner with a strong aptitude for new technologies.
• Ability to thrive in a fast-paced, evolving environment.
• Self-motivated problem solver with strong analytical and critical-thinking skills.

Preferred qualifications

• Formal education and training in insider risk and/or counterintelligence.
• Possession of investigative interviewing skills to gather context from employees, managers, and witnesses during internal investigations.
• Proficiency in identifying insider threats using a multitude of sources.
• Ability to break down and understand complex problems and the ability to develop a plan and innovative ways to address them.
• Strong people and team/relationship building skills in cross-functional global team settings.
• Demonstrated ability to collaborate with wider security, counterintelligence, and insider risk professional communities.

Our commitment

We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.

Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.

Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories – On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.

Salary

CA San Francisco Bay Area Salary Range for this position: $92,000.00 - $211,000.00.

The above salary range for this position is relevant to applicants that reside or work onsite in the California, San Francisco Bay Area only. Salary offers will depend on factors that include the location you work from, your level, education, training, specific skills, years of experience and comparison to other employees already in this role. Actual salary may vary from salary offered due to numerous factors including but not limited to unpaid time off, unpaid leave, company mandated shutdown, and other relevant factors.

Our Perks and Benefits

At Lam, our people make amazing things possible. That’s why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.