Cybersecurity Analyst

Description & Requirements

Who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in.

As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

About this team

lululemon's technology services are modernizing, adopting leading-edge technology that supports our business and guests. Global Security Operations helps protect the data and assets of our collective. This Staff Cybersecurity Analyst will strengthen the operations in core functions including incident response and threat intelligence while continuously evolving how security is delivered at scale.

As a Staff Cybersecurity Analyst, you are a senior technical expert who drives complex, cross-functional cybersecurity initiatives and shapes the organization's security strategy. You apply deep expertise across governance, risk management, compliance, threat intelligence, and operational security to analyze sophisticated risks, anticipate emerging threats, and design solutions that elevate enterprise-level security posture. You lead high-impact investigations, guide security architecture and control design, and develop frameworks, standards, and methodologies that scale across the cybersecurity organization.

You provide expert consultation to engineering, product, legal, risk, and operational partners—helping teams make risk‑informed decisions and embed security into processes, platforms, and lifecycle workflows. You mentor analysts at all levels, uplift technical rigor, and contribute to long‑term planning by identifying strategic gaps, evaluating new capabilities, and influencing roadmaps. Your work ensures the organization has the visibility, resilience, and security maturity required to safeguard critical systems and guide cybersecurity evolution at scale.

Select responsibilities include:

• Define, refine, and operationalize organization-wide security frameworks, standards, and methodologies across governance, risk assessment, compliance, and incident management
• Provide advanced technical and strategic guidance across cybersecurity domains advising on complex risks, control design, regulatory expectations, and long‑range security planning
• Mentor, develop, and upskill analysts at all levels providing structured coaching, deep technical guidance, and support that strengthens organizational capability
• Serve as a trusted advisor to senior and executive stakeholders communicating complex security risks, business impacts, and recommended strategies
• Drive cross‑functional resolution of high‑impact, multi‑domain security challenges facilitating alignment across Technology, Risk, Compliance, Legal, Product, and Operations
• Shape and maintain advanced security reporting and metrics enhancing visibility into risk trends, control performance, compliance health, and program outcomes
• Identify opportunities for strategic improvements including process redesign, automation, tooling enhancements, and governance structure changes

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field
• 9‑12 years of security operations, SOC operations, incident response, or security monitoring experience, or equivalent
• Proven experience monitoring organizational security posture using enterprise SIEM, EDR, IDS/IPS, and analytics platforms; track record of establishing comprehensive threat detection frameworks
• Demonstrated ability to lead high‑impact incident response efforts and conduct strategic security investigations; experience establishing organizational incident response frameworks and major incident protocols
• Experience developing and refining enterprise threat intelligence…