Staff Cybersecurity Engineer

Location: Canada

State/Province/City: British Columbia

City: Vancouver

Business Unit: Store Support Centre (SSC)

Time Type: Full-time

Description & Requirements

who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

 

about this team

The Security, Architecture, Data Security & Engineering (SADE) organization in Cybersecurity is a multidisciplinary security team focused on protecting lululemon’s digital ecosystem through proactive architecture, data protection, and engineering enablement. We deliver scalable, resilient, and integrated security capabilities that enable secure innovation across lululemon’s technology landscape. As a Staff Security Engineer, you’ll apply advanced, in-depth and/or broad technical expertise; recognized as a top engineering resource within the organization and shapes technical direction. You’ll spend a significant amount of your time planning the evolution of cybersecurity capabilities and systems guiding the organizations roadmap year-to-year. Staff Engineers work to elevate our engineering community by designing/introducing tools and systems that accelerate and support our engineering best practices.

 

core responsibilities

As a Staff Cybersecurity Engineer, you will establish and advance security engineering practices across the organization, shaping how security capabilities are designed, implemented, and maintained within development and platform environments. You will lead security engineering initiatives that improve consistency, scalability, and quality, define implementation frameworks and coding standards, and influence complex engineering decisions across teams. You will partner with engineering and security leadership to develop security engineering capability through mentorship and practice development, drive continuous improvement in security tooling and automation, and ensure security engineering is effectively embedded into development practices and system implementations.

Select responsibilities include:

  • Establish security implementation practices defining how the organization builds security controls and security systems
  • Set the direction for threat modeling and security assessments across the organization, anticipating emerging attacker techniques and embedding abuse-resistant design principles into platforms, architectures, and engineering practices
  • Provide technical leadership during critical security incidents, driving cross-organizational root cause analysis and defining durable, scalable improvements to detection, prevention, and enterprise security posture
  • Lead organizational security engineering initiatives coordinating security implementation across engineering organizations
  • Create security implementation standards establishing coding standards, implementation patterns, and quality practices
  • Partner with engineering directors on security implementation approaches and security engineering strategy
  • Mentor security engineers across the organization providing technical guidance and career development

 

qualifications

  • Bachelor’s degree in Computer Science, Cybersecurity, or related field; advanced security certification strongly preferred
  • 9-12 years of experience driving organization-wide security engineering programs, establishing security architecture and frameworks, and leading complex security initiatives, or equivalent
  • Proven experience establishing organizational security control frameworks defining how security controls are built and deployed across the organization; track record of building reusable security control platforms and security infrastructure used organization-wide
  • Demonstrated ability toestablishorganizational security coding practices and build security engineering capabilities through tools, frameworks, and training that enable secure development at scale
  • Experience establishing organizational security tooling approach including build versus buy decisions; proven ability to build security tool development capabilities enabling security engineers to create tools efficiently
  • Track record of establishing organizational security testing practices and building security testing capabilities through tools and frameworks embedded in development processes
  • Proven experience leading organizational security engineering transformation; demonstrated ability to develop security engineering talent through technical coaching and growing senior engineers into leadership roles

 

must haves

  • Acknowledge the presence of choice in every moment and take personal responsibility for your life.
  • Possess an entrepreneurial spirit and continuously innovate to achieve great results. 
  • Communicate with honesty and kindness and create the space for others to do the same. 
  • Lead with courage, knowing the possibility of greatness is bigger than the fear of failure. 
  • Foster connection by putting people first and building trusting relationships. 
  • Integrate fun and joy as a way of being and working, aka doesn’t take yourself too seriously. 

 

additional notes
Authorization to work in Canada is required for this role.

 

compensation and benefits package 

lululemon’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. The typical hiring range for this position is from $148,000 - $194,300annually; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.  


 

At lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedication, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:

  • Extended health and dental benefits, and mental health plans 
  • Paid time off 
  • Savings and retirement plan matching 
  • Generous employee discount 
  • Fitness & yoga classes 
  • Parenthood top-up 
  • Extensive catalog of development course offerings 
  • People networks, mentorship programs, and leadership series (to name a few) 

 

Note: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.

 
workplace arrangement


Hybrid 

In-person collaboration and connection is important to our culture. Work is performed onsite, minimum 4 days per week.


#LI-AF1