Cybersecurity Analyst - Threat Intelligence

Cybersecurity Jobs; Seattle (WA); Hybrid; USD 125,000 - 163,000; Full time

Benefits offered by this job

Health benefits

Paid time off

401(k) match

Employee discount

Fitness classes

Parental top-up

Development courses

Mentorship programs

Job summary

lululemon is seeking a Threat Intelligence professional for a hybrid role in Seattle. You will identify, assess, and communicate cyber threats across the intel lifecycle, turning findings into actionable guidance for security and business teams.

You will help mature the organization’s Threat Intelligence capability through processes, playbooks, and automation, collaborating with stakeholders to operationalize intelligence across the company.

Qualifications

• 2–4 years of Cyber Threat Intelligence or related cybersecurity experience.
• Ability to translate technical findings into actionable intelligence for diverse audiences.
• Familiarity with threat intel concepts: lifecycle, IOCs, TTPs, MITRE ATT&CK.
• Experience with SIEM/EDR and threat intel platforms.
• Proficiency with KQL, SQL, and Python.

Responsibilities

• Partner with stakeholders to translate intelligence needs into requirements and priorities.
• Collect and analyze intelligence from open sources, partners, vendors, and internal data.
• Research actors, campaigns, malware, infrastructure, IOCs, and TTPs with focus on cybercrime and ransomware.
• Create clear, actionable intelligence for technical and non-technical audiences.

Skills

Analytical skills

Communication skills

Collaborative mindset

Independent problem solving

Tools

SIEM

EDR

Threat intelligence platforms

KQL

SQL

Python

MITRE ATT&CK

Job description

Hybrid role in Seattle supporting stronger security outcomes through practical threat intelligence. This position at lululemon focuses on identifying, assessing, and communicating cyber threats across the intelligence lifecycle, turning findings into actionable guidance for teams across security and the business. You will also help build and mature the organization’s Threat Intelligence capability through processes, playbooks, and automation, while collaborating with stakeholders to improve how intelligence is operationalized.

What you’ll do

• Partner with stakeholders across lululemon to understand intelligence needs and translate them into intelligence requirements and collection priorities.
• Collect and analyze intelligence from open sources, security partners, vendors, and internal data to identify threats relevant to lululemon and the retail sector.
• Research threat actors, campaigns, malware, infrastructure, IOCs, and TTPs, with a focus on cybercriminal and ransomware activity.
• Create clear, actionable intelligence for technical and non-technical audiences, including tactical reporting, threat notifications, and assessments of emerging threats and trends.
• Work closely with Security Operations (SOC) and Incident Response (IR) during investigations to identify threat actors, infrastructure, IOCs, and TTPs and support response actions.
• Use SIEM, EDR, threat intelligence platforms, and other security technologies to investigate adversary activity and translate intelligence into threat hunting, detection, and defensive opportunities.
• Respond to RFIs from security leadership and other stakeholders with assessments that inform decision-making.
• Help mature Threat Intelligence by developing processes, playbooks, knowledge management, collection strategies, and automation, and identifying improvements to operationalization across the organization.

What you bring

• 2-4 years of experience in Cyber Threat Intelligence, Security Operations, Incident Response, Threat Hunting, or a related cybersecurity discipline.
• Strong analytical and investigative skills, with the ability to convert technical findings into actionable intelligence.
• Knowledge of threat intelligence concepts and methodologies, including the intelligence lifecycle, IOCs, TTPs, and the MITRE ATT&CK framework.
• Familiarity with common cyber threats and adversary behaviors, with interest in cybercriminal and ransomware ecosystems.
• Experience with security technologies such as SIEM, EDR, threat intelligence platforms, and other defensive tools.
• Working knowledge of networking, operating systems, and security event logs, with familiarity in KQL, SQL, or Python.
• Strong written and verbal communication skills for technical and non-technical audiences.
• Curious, collaborative mindset, with comfort working independently across teams to solve problems and identify improvement opportunities.

Tools and technologies

• SIEM, EDR, threat intelligence platforms
• KQL, SQL, Python
• MITRE ATT&CK

Benefits and support

• Extended health and dental benefits, and mental health plans
• Paid time off
• Savings and retirement plan matching
• Generous employee discount
• Fitness & yoga classes
• Parenthood top-up
• Extensive catalog of development course offerings
• People networks, mentorship programs, and leadership series (to name a few)

Workplace arrangement

• Hybrid
• In‑person collaboration and connection is important to the culture, with work performed onsite a minimum of 4 days per week
• #LI-Onsite, #LI-SP1

Additional notes

• Applicants must be authorized to work for ANY employer in the U.S.
• Visa sponsorship is not available for this role.

Values in action (must haves)

• Acknowledge the presence of choice in every moment and take personal responsibility for your life.
• Possess an entrepreneurial spirit and continuously innovate to achieve great results.
• Communicate with honesty and kindness and create the space for others to do the same.
• Lead with courage, knowing the possibility of greatness is bigger than the fear of failure.
• Foster connection by putting people first and building trusting relationships.
• Integrate fun and joy as a way of being and working, aka doesn’t take yourself too seriously.

Salary range: USD 124,500 - 163,400 per year.