Senior Cybersecurity Engineer - Data & AI Security

Overview

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. We focus on technical fabrics and functional design to create transformational products and experiences that support people in moving, growing, connecting, and being well, with a commitment to an equitable, inclusive and growth-focused environment for our people.

The Data & AI Security team protects the organization’s data and AI assets while enabling responsible, scalable innovation. We build and operate Data Security Posture Management (DSPM) and AI Security Posture Management (AISPM) across a global ecosystem, partnering with Data & Analytics, Engineering, Legal, Privacy, and GRC teams to embed security by design with minimal business friction. Our focus is on visibility, prevention, and remediation at scale.

Senior Cybersecurity Engineer (AI Security) is responsible for securing the organization’s AI ecosystem by discovering, assessing, and mitigating risks related to AI models, data usage, model lifecycle, and AI-driven workflows. This role collaborates with Data Governance, Platform Engineering, and Security Architecture to enable safe and scalable AI adoption while ensuring regulatory, privacy, and policy alignment.

As a Senior Cybersecurity Engineer, you will lead complex security engineering initiatives, designing and implementing security controls, platforms, and solutions that protect critical systems  will build and operate enterprise security capabilities such as centralized authentication, security enforcement mechanisms, and security automation, while applying secure coding practices and rigorous testing. You will partner with engineering teams to embed security into system design and delivery, drive improvements to security quality and reliability, and mentor junior engineers through hands-on technical leadership and knowledge sharing.

• Build enterprise security systems implementing centralized authentication, security platforms, and organization-wide controls
• Lead comprehensive threat modeling and security assessments for complex systems, evaluating attacker behaviour across integrations and influencing secure design decisions early in the development lifecycle
• Own end-to-end response for complex security incidents, driving deep root cause analysis and delivering coordinated long-term improvements to detection, prevention, and security monitoring capabilities
• Develop advanced security code, tools, and libraries including security automation platforms, scanners and detectors, security testing systems, and security SDKs
• Establish security code standards defining secure coding practices, code review requirements, and implementation quality

• Bachelor’s degree in Computer Science, Cybersecurity, or related field; security certification strongly preferred
• 6-10 years of experience leading security engineering initiatives, establishing security standards and practices, and building security systems at scale, or equivalent
• Hands-on experience securing data used by AI systems, including data discovery, classification, access governance, and usage monitoring across cloud data platforms, feature stores, and AI pipelines
• Experience securing AI and analytics workloads in modern cloud environments, including identity and access controls, service-to-service authentication, secrets management, and policy enforcement across platforms supporting AI/ML development and inference
• Proven experience implementing enterprise security controls and building security infrastructure including centralized authentication, authorization services, and security policy enforcement systems at scale
• Track record of writing complex security systems including security platforms and SDKs; experience establishing security code review practices, security checklists, and security development frameworks
• Demonstrated ability to lead advanced threat modeling for complex systems, anticipating adversarial behaviour; experience owning investigation and resolution of complex security incidents with deep root cause analysis
• Familiarity with…