Cybersecurity Analyst - Threat Intelligence

Lululemon Athletica Inc.; Seattle (WA); Hybrid; USD 125,000 - 163,000; Full time

Benefits offered by this job

Extended health and dental benefits

Mental health plans

Paid time off

Retirement plan matching

Parenthood top-up

Development courses

Mentorship programs

Leadership series

Wellbeing programs

Job summary

lululemon is seeking a Cybersecurity Analyst - Threat Intelligence to protect the brand from cyber threats. You will identify, assess, and communicate threats relevant to lululemon and translate intelligence into actionable insights for security teams.

You will partner with SOC and IR, leverage SIEM/EDR and intel platforms, and help mature the threat intelligence program through playbooks, automation, and knowledge management.

Qualifications

• 2–4 years of experience in Cyber Threat Intelligence, Security Operations, Incident Response, Threat Hunting, or related cybersecurity discipline.
• Strong analytical and investigative skills with the ability to turn technical information into clear intelligence.
• Understanding of threat intelligence concepts and methodologies, including the intelligence lifecycle, IOCs, TTPs, and the MITRE ATT&CK framework.
• Knowledge of common cyber threats and adversary behaviors, with interest in cybercriminal and ransomware ecosystems.

Responsibilities

• Collaborate with stakeholders to understand intelligence needs and translate them into clear requirements and collection priorities.
• Collect and analyze intelligence from open sources, security partners, vendors, and internal data to identify threats.
• Research threat actors, campaigns, malware, infrastructure, IOCs, and TTPs with focus on cybercriminal activity.
• Produce clear, actionable intelligence for technical and non-technical audiences (reports, notifications, assessments).
• Partner with SOC and IR teams during investigations to identify threat actors, infrastructure, IOCs, and TTPs and inform responses.
• Leverage SIEM, EDR, threat intel platforms to investigate adversary activity and translate intelligence into hunting, detection, and defenses.
• Respond to RFIs from security leadership with assessments to support decisions.
• Help mature Threat Intelligence capability by developing processes, playbooks, knowledge management, collection strategies, and automation.

Skills

Cyber Threat Intelligence

Security Operations

Incident Response

Threat Hunting

MITRE ATT&CK

SIEM

EDR

Threat intel platforms

Networking basics

Python/SQL/KQL

Tools

SIEM

EDR

Threat intel platforms

Job description

Cybersecurity Analyst - Threat Intelligence

Business Unit: Store Support Centre (SSC)

Time Type: Full-time

Description & Requirements

who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

about this team

The Threat Intelligence team protects the lululemon community, and the value & reputation of lululemon’s brand from adversarial threats through the pillars of intelligence; partnerships; and tradecraft. This is accomplished by connecting the cyber threat landscape to our business interests, generating timely and actionable intelligence, and cultivating relationships to mitigate those risks. To further enhance our team, we are looking for a Security Analyst on our Threat Intelligence.

core responsibilities

The Security Analyst – Threat Intelligence will work across the intelligence lifecycle to identify, assess, and communicate cyber threats relevant to lululemon, translating intelligence into actionable insights that strengthen our security posture.

• Partner with stakeholders across lululemon to understand their intelligence needs and translate them into clear intelligence requirements and collection priorities.
• Collect and analyze intelligence from open sources, security partners, vendors, and internal data to identify threats relevant to lululemon and the retail sector.
• Research threat actors, campaigns, malware, infrastructure, indicators of compromise (IOCs), and tactics, techniques, and procedures (TTPs), with a focus on cybercriminal and ransomware activity.
• Produce clear, actionable intelligence for technical and non-technical audiences, including tactical reporting, threat notifications, and assessments of emerging threats and trends.
• Partner closely with Security Operations (SOC) and Incident Response (IR) teams during investigations, using intelligence to identify threat actors, infrastructure, IOCs, and TTPs and inform response actions.
• Leverage SIEM, EDR, threat intelligence platforms, and other security technologies to investigate adversary activity and translate intelligence into threat hunting, detection, and defensive opportunities.
• Research and respond to Requests for Information (RFIs) from security leadership and other stakeholders, providing assessments that support informed decision-making.
• Help mature lululemon's Threat Intelligence capability by developing processes, playbooks, knowledge management, collection strategies, and automation while identifying opportunities to improve how intelligence is operationalized across the organization.

qualifications

• 2–4 years of experience in Cyber Threat Intelligence, Security Operations, Incident Response, Threat Hunting, or a related cybersecurity discipline.
• Strong analytical and investigative skills, with the ability to turn technical information into clear, actionable intelligence.
• Understanding of threat intelligence concepts and methodologies, including the intelligence lifecycle, IOCs, TTPs, and the MITRE ATT&CK framework.
• Knowledge of common cyber threats and adversary behaviors, with an interest in cybercriminal and ransomware ecosystems.
• Familiarity with security technologies such as SIEM, EDR, threat intelligence platforms, and other defensive security tools.
• Working knowledge of networking, operating systems, and security event logs, with familiarity in query or scripting languages such as KQL, SQL, or Python.
• Strong written and verbal communication skills, with the ability to communicate technical findings to both technical and non-technical audiences.
• Curious, collaborative, and comfortable working independently across teams to solve problems and identify opportunities for improvement.

must haves

• Acknowledge the presence of choice in every moment and take personal responsibility for your life.
• Possess an entrepreneurial spirit and continuously innovate to achieve great results.
• Communicate with honesty and kindness and create the space for others to do the same.
• Lead with courage, knowing the possibility of greatness is bigger than the fear of failure.
• Foster connection by putting people first and building trusting relationships.
• Integrate fun and joy as a way of being and working, aka doesn’t take yourself too seriously.

additional notes

Please note: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of employment visa at this time for this role.

compensation and benefits package

lululemon’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and teamperformance. Thetypical hiring range for this positionis from $ 124,500 - 163,400 annually ; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.

At lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedication, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:

• Extended health and dental benefits, and mental health plans
• Paid time off
• Savings and retirement plan matching
• Parenthood top-up
• Extensive catalog of development course offerings
• People networks, mentorship programs, and leadership series (to name a few)

Note: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.

workplace arrangement

Hybrid

In-person collaboration and connection is important to our culture. Work is performed onsite, minimum 4 days per week.

Only those applicants under consideration will be contacted. Please accept our utmost appreciation for your interest.

lululemon is an Equal Employment Opportunity employer. Employment decisions are based on merit and business needs, and not on race, color, creed, age, sex, gender, sexual orientation, national origin, religion, marital status, medical condition, physical or mental disability, military service, pregnancy, childbirth and related medical conditions or any other classification protected by federal, state or provincial and local laws and ordinances. Reasonable accommodation is available for qualified individuals with disabilities, upon request. This Equal Employment Opportunity policy applies to all practices relating to recruitment and hiring, compensation, benefits, discipline, transfer, termination and all other terms and conditions of employment. While management is primarily responsible for seeing that Lululemon equal employment opportunity policies are implemented, you share in the responsibility for assuring that, by your personal actions, the policies are effective.

lululemon is committed to providing reasonable accommodation to applicants with disabilities. If you would like someone from our team to contact you for individualized support, email us at [e-mail]. In your email, please include the position title, the location of the position and the nature of your request.
The use of AI tools, including but not limited to ChatGPT, Microsoft Copilot, Gemini, DeepSeek, or any other AI-assisted software, is strictly prohibited during the interview process. This includes, AI-generated responses, content creation, or any form of automated assistance in live interviews, case studies, technical assessments, or written submissions.
At lululemon, we are committed to privacy, integrity, transparency, and ethical hiring practices. Our commitment to responsible AI ensures that proprietary information is protected and that all hiring decisions are based on an individual’s own skills, judgment, and expertise without AI assistance. Any use of AI during the interview process will result in immediate disqualification. lululemon reserves the right to use AI detection tools to verify the authenticity of candidate responses.