Staff Engineer - Cyber Security Operations

Staff Engineer - Cyber Security Operations

Business Unit: Store Support Centre (SSC)

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. We create products and experiences that enable people to live active, mindful lives. Our success is driven by innovative products, strong community connections, and an unwavering commitment to our people. We are committed to building an equitable, inclusive, and growth-focused environment where everyone can thrive.

The Cyber Security Operations team enables lululemon to operate securely at global scale by identifying, analyzing, and reducing cybersecurity risk across the organization. The team spans Threat Detection and Response, Incident Response, Threat Intelligence and Exposure Management.

As a Staff Engineer, you are a senior technical individual contributor who leads complex, cross-functional security analyses and initiatives while shaping how security risk is understood and managed  apply deep expertise across governance, risk management, compliance, threat analysis, and operational security to evaluate sophisticated risks, anticipate emerging issues, and design durable solutions that strengthen enterprise security posture.

This role operates at an organization-wide level of influence. You serve as a trusted advisor to technology, legal, privacy, risk, and business stakeholders, helping embed security into processes, platforms, and decision-making. You also mentor analysts at all levels and contribute to advancing the maturity, consistency, and effectiveness of information security operations.

• Lead complex security analyses, assessments, and investigations to measurably reduce organizational risk and strengthen overall security posture across multiple cybersecurity domains.
• Deliver high-quality analysis, documentation, issue management, and cross-functional coordination while conducting advanced evaluations in governance, compliance, operations, investigations, vulnerability management, and issue management.
• Develop, refine, and scale security processes, standards, and frameworks—including governance workflows, risk methodologies, compliance processes, and assessment models—that support multiple teams and functions.
• Provide clear, risk-inform guidance that translates technical security findings into business-relevant insights for both technical and nontechnical stakeholders.
• Mentor junior and intermediate analysts to elevate analytical rigor, judgment, and overall security capability across the team.
• Lead or coordinate cross-functional reviews, investigations, and remediation efforts, ensuring root causes are identified and corrective actions are well-defined and effectively implemented.
• Synthesize insights from assessments, evidence, operational data, architecture documentation, and control reviews to identify systemic issues, trends, and emerging risks. Partner with Technology, Risk, Compliance, Legal, Privacy, Architecture, and Operations to strengthen controls and refine workflows.
• Contribute to metrics, dashboards, and reporting that enhance visibility into security posture and risk trends, identify opportunities to improve governance, efficiency, and scalability, and lead post-incident and post-issue reviews to drive organizational resilience.

• Minimum 10 years of experience in information security, security operations, risk management, or closely related domains.
• Deep experience conducting risk-based security analysis, investigations, assessments, and issue remediation across enterprise environments.
• Strong working knowledge of security and risk frameworks (e.g., NIST CSF, ISO 27001, CIS Controls).
• Demonstrated ability to influence outcomes and architecture without formal people management responsibility.
• Excellent written and verbal communication skills, with the ability to explain complex security concepts to diverse audiences.

• Acknowledge the presence of choice in every moment and take personal responsibility for your life.
• Possess an entrepreneurial spirit and continuously innovate to achieve great results.
• Communicate with…