lululemon Cybersecurity Analyst - Threat Intelligence

lululemon; Vancouver; Hybrid; CAD 112,000 - 147,000; Full time

Benefits offered by this job

Extended health and dental

Mental health plans

Paid time off

Employee discount

Wellbeing programs

Job summary

lululemon is seeking a Security Analyst for Threat Intelligence in Canada. You will partner with stakeholders to define intelligence needs, collect and analyze open-source and internal data, and produce actionable insights for SOC and IR teams.

The role emphasizes threat actors, IOCs, TTPs, and ransomware trends, with a focus on operationalizing intelligence. You will work with SIEM/EDR tools and threat intel platforms, supporting incident response and proactive hunting.

Qualifications

• 2-4 years of experience in Cyber Threat Intelligence, Security Operations, Incident Response, Threat Hunting, or related cybersecurity discipline.
• Strong analytical and investigative skills, with the ability to turn technical information into clear, actionable intelligence.
• Understanding of threat intelligence concepts and methodologies, including the intelligence lifecycle, IOCs, TTPs, and the MITRE ATT&CK framework.
• Familiarity with security technologies such as SIEM, EDR, threat intelligence platforms, and other defensive security tools.

Responsibilities

• Partner with stakeholders across lululemon to understand their intelligence needs and translate them into clear intelligence requirements and collection priorities.
• Collect and analyze intelligence from open sources, security partners, vendors, and internal data to identify threats relevant to lululemon and the retail sector.
• Research threat actors, campaigns, malware, infrastructure, indicators of compromise (IOCs), and TTPs, with a focus on cybercriminal and ransomware activity.
• Produce clear, actionable intelligence for technical and non-technical audiences, including tactical reporting, threat notifications, and assessments of emerging threats and trends.
• Partner with SOC and IR teams during investigations, using intelligence to identify threat actors, infrastructure, IOCs, and TTPs and inform response actions.
• Leverage SIEM, EDR, threat intelligence platforms, and other security technologies to investigate adversary activity and translate intelligence into threat hunting, detection, and defensive opportunities.
• Research and respond to RFIs from security leadership and other stakeholders, providing assessments that support informed decision-making.
• Help mature lululemon's Threat Intelligence capability by developing processes, playbooks, knowledge management, collection strategies, and automation.

Skills

Threat intelligence

Security operations

Analytical skills

MITRE ATT&CK

SIEM

EDR

Python

KQL

SQL

Threat hunting

Communication

Tools

Threat intel platforms

SIEM

EDR

Job description

Description & Requirements

who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

about this team

The Threat Intelligence team protects the lululemon community, and the value & reputation of lululemon's brand from adversarial threats through the pillars of intelligence; partnerships; and tradecraft. This is accomplished by connecting the cyber threat landscape to our business interests, generating timely and actionable intelligence, and cultivating relationships to mitigate those risks. To further enhance our team, we are looking for a Security Analyst on our Threat Intelligence.

core responsibilities

• Partner with stakeholders across lululemon to understand their intelligence needs and translate them into clear intelligence requirements and collection priorities.
• Collect and analyze intelligence from open sources, security partners, vendors, and internal data to identify threats relevant to lululemon and the retail sector.
• Research threat actors, campaigns, malware, infrastructure, indicators of compromise (IOCs), and tactics, techniques, and procedures (TTPs), with a focus on cybercriminal and ransomware activity.
• Produce clear, actionable intelligence for technical and non-technical audiences, including tactical reporting, threat notifications, and assessments of emerging threats and trends.
• Partner closely with Security Operations (SOC) and Incident Response (IR) teams during investigations, using intelligence to identify threat actors, infrastructure, IOCs, and TTPs and inform response actions.
• Leverage SIEM, EDR, threat intelligence platforms, and other security technologies to investigate adversary activity and translate intelligence into threat hunting, detection, and defensive opportunities.
• Research and respond to Requests for Information (RFIs) from security leadership and other stakeholders, providing assessments that support informed decision-making.
• Help mature lululemon's Threat Intelligence capability by developing processes, playbooks, knowledge management, collection strategies, and automation while identifying opportunities to improve how intelligence is operationalized across the organization.

qualifications

• 2-4 years of experience in Cyber Threat Intelligence, Security Operations, Incident Response, Threat Hunting, or a related cybersecurity discipline.
• Strong analytical and investigative skills, with the ability to turn technical information into clear, actionable intelligence.
• Understanding of threat intelligence concepts and methodologies, including the intelligence lifecycle, IOCs, TTPs, and the MITRE ATT&CK framework.
• Knowledge of common cyber threats and adversary behaviors, with an interest in cybercriminal and ransomware ecosystems.
• Familiarity with security technologies such as SIEM, EDR, threat intelligence platforms, and other defensive security tools.
• Working knowledge of networking, operating systems, and security event logs, with familiarity in query or scripting languages such as KQL, SQL, or Python.
• Strong written and verbal communication skills, with the ability to communicate technical findings to both technical and non-technical audiences.
• Curious, collaborative, and comfortable working independently across teams to solve problems and identify opportunities for improvement.

must haves

• Acknowledge the presence of choice in every moment and take personal responsibility for your life.
• Possess an entrepreneurial spirit and continuously innovate to achieve great results.
• Communicate with honesty and kindness and create the space for others to do the same.
• Lead with courage, knowing the possibility of greatness is bigger than the fear of failure.
• Foster connection by putting people first and building trusting relationships.
• Integrate fun and joy as a way of being and working, aka doesn't take yourself too seriously.

additional notes

Applicants must be eligible to work in Canada.

compensation and benefits package

lululemon's compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and teamperformance. Thetypical hiring range for this position is from $ 112,200 - 147,200 annually ; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.

At lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedication, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:

• Extended health and dental benefits, and mental health plans
• Paid time off
• Savings and retirement plan matching
• Generous employee discount
• Fitness & yoga classes
• Parenthood top-up
• Extensive catalog of development course offerings
• People networks, mentorship programs, and leadership series (to name a few)

Note: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.

workplace arrangement

Hybrid

In-person collaboration and connection is important to our culture. Work is performed onsite, minimum 4 days per week.

#LI-Onsite

#LI-SP1