Senior Cybersecurity Engineer - Data & AI Security

This job is with lululemon, an inclusive employer and a member of my Gwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

Description & Requirements
Who we are
lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in.

As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

About this team
The Data & AI Security team is responsible for protecting the organization's most critical data and AI assets while enabling responsible, scalable innovation. We build and operate Data Security Posture Management (DSPM) and AI Security Posture Management (AISPM) capabilities across a complex, global ecosystem. Our work is highly cross-functional, partnering with Data & Analytics, Engineering, Legal, Privacy, and GRC teams to embed security by design while keeping the organization fast, compliant, and resilient.

Our focus is on visibility, prevention, and remediation at scale, balancing strong security controls with minimum business friction.
The Senior Cybersecurity Engineer is responsible for securing the organization's AI ecosystem by discovering, assessing, and mitigating risks associated with AI models, data usage, model lifecycle, and AI-driven workflows. This role partners closely with Data Governance, Platform Engineering, and Security Architecture to enable safe and scalable AI adoption while ensuring regulatory, privacy, and corporate policy alignment.

Core responsibilities
As a Senior Cybersecurity Engineer, you will lead complex security engineering initiatives, designing and implementing security controls, platforms, and solutions that protect critical systems  will build and operate enterprise security capabilities such as centralized authentication, security enforcement mechanisms, and security automation, while applying secure coding practices and rigorous testing and validation. You will partner closely with engineering teams to embed security into system design and delivery, drive improvements to security quality and reliability, and mentor junior engineers through hands-on technical leadership and knowledge sharing.

Select responsibilities include:

Build enterprise security systems implementing centralized authentication, security platforms, and organization-wide controls
Lead comprehensive threat modeling and security assessments for complex systems, evaluating attacker behaviour across integrations and influencing secure design decisions early in the development lifecycle
Own end-to-end response for complex security incidents, driving deep root cause analysis and delivering coordinated long-term improvements to detection, prevention, and security monitoring capabilities
Develop advanced security code, tools, and libraries including security automation platforms, scanners and detectors, security testing systems, and security SDKs
Establish security code standards defining secure coding practices, code review requirements, and implementation quality

Qualifications
Bachelor's degree in Computer Science  , Cybersecurity, or related field; security certification strongly preferred
6-10 years of experience leading security engineering initiatives, establishing security standards and practices, and building security systems at scale, or equivalent.

Experience with Data Security Posture Management (DSPM), Data Loss Prevention (DLP), AI Security Posture Management (AISPM), or related data security technologies, including data discovery, classification, run time monitoring, and policy enforcement across enterprise and cloud environments.
Experience owning, operating, or maturing enterprise security platforms and…