Job Description
Description & Requirements who we are lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.
about this team As the Senior Technology Manager, Security Engineering & Architecture, you will be a key leader within the Technology organization, responsible for shaping and executing the vision for secure, resilient, and scalable technology solutions across a rapidly evolving enterprise. You will lead a multidisciplinary team of security architects and engineers responsible for Security Architecture, Endpoint Security, Attack Surface Management, and Offensive Security capabilities. This role is critical to establishing and scaling secure-by-design practices across the organization, ensuring security is embedded early in technology decisions and delivery processes. You will partner closely with Enterprise Engineering, Infrastructure, Digital, Product, Data & AI, and Cybersecurity leadership teams to drive security outcomes that balance risk reduction, business enablement, and employee experience. As a strategic leader and player-coach, you will build trusted partnerships, influence technology direction, and develop a high-performing team focused on delivering sustainable security improvements that support the continued growth of the business.
core responsibilities Leadership & Strategy
- Develop and execute the strategy, roadmap, and operating model for Security Engineering & Architecture, ensuring alignment with enterprise technology and cybersecurity priorities.
- Lead, coach, and develop a team of security architects and engineers while fostering a culture of accountability, innovation, inclusion, and continuous learning.
- Shape the future of the Security Engineering & Architecture function through organizational design, capability development, and strategic planning.
Security Architecture & Secure-by-Design
- Establish and mature the Security Architecture function, including architecture standards, reference patterns, threat modelling practices, and security design assessments.
- Define and operationalize scalable security review processes that embed security requirements throughout the technology lifecycle.
- Partner with engineering and architecture leaders to ensure security is considered early and consistently across technology investments and initiatives.
- Drive adoption of secure-by-design principles that enable teams to deliver secure solutions efficiently and effectively.
Security Engineering & Endpoint Security
- Own the endpoint security strategy, roadmap, and continuous improvement of related controls and platforms.
- Ensure security engineering solutions effectively balance security outcomes, operational excellence, and employee experience.
- Lead the design, implementation, and optimization of security technologies, automation capabilities, and engineering processes that improve organizational resilience.
Offensive Security & Attack Surface Management
- Oversee Offensive Security and Attack Surface Management capabilities, ensuring proactive identification and remediation of security exposures.
- Leverage offensive testing, continuous validation, and attack surface intelligence to strengthen preventative controls and reduce organizational risk.
- Drive measurable improvements in security posture through prioritized remediation and continuous risk reduction initiatives.
Partnership & Influence
- Build strong relationships with Enterprise Engineering, Infrastructure, Enterprise Architecture, Product, and Data & AI teams to influence security outcomes and technology decisions.
- Serve as a trusted advisor to technology leaders on security architecture, engineering practices, and risk management.
- Collaborate with Security Operations, GRC, Identity, and other cyber functions to ensure cohesive security strategies and effective execution.
Governance, Metrics & Continuous Improvement
- Establish meaningful metrics and reporting that demonstrate program effectiveness, operational maturity, and risk reduction outcomes.
- Partner with GRC and Risk teams to align security architecture and engineering practices with regulatory, compliance, and enterprise risk management requirements.
- Drive continuous improvement across processes, tooling, and team effectiveness through measurement and operational excellence.
Vendor & Budget Management
- Evaluate, onboard, and manage strategic vendors and technology partners supporting Security Engineering & Architecture capabilities.
- Develop and manage operational and project budgets, ensuring investments align with business priorities and measurable security outcomes.
qualifications - 8-10+ years of experience delivering cybersecurity programs, engineering solutions, and risk reduction initiatives within complex enterprise environments.
- 5+ years of people leadership experience leading high-performing technical teams.
- Demonstrated success building or transforming cybersecurity capabilities, programs, or operating models.
- Experience leading security engineering, endpoint security, infrastructure security, or related technical disciplines.
- Strong background in security engineering, endpoint security, infrastructure security, and security architecture.
- Experience establishing security review processes, architecture governance, and secure-by-design programs.
- Knowledge of threat modelling, security architecture principles, control design, and enterprise risk management.
- Familiarity with cloud technologies, enterprise platforms, and modern security engineering practices.
- Experience leveraging offensive security, attack surface management, or security validation activities to reduce risk.
- Proven ability to influence senior technology stakeholders and drive outcomes in complex, matrixed organizations.
- Strong strategic thinking and problem-solving capabilities, with the ability to operate effectively in ambiguous and evolving environments.
- Experience managing vendor relationships, contracts, and operational budgets.
- Excellent communication skills with the ability to translate complex technical topics into clear business outcomes.
must haves - Acknowledge the presence of choice in every moment and take personal responsibility for your life.
- Possess an entrepreneurial spirit and continuously innovate to achieve great results.
- Communicate with honesty and kindness and create the space for others to do the same.
- Lead with courage, knowing the possibility of greatness is bigger than the fear of failure.
- Foster connection by putting people first and building trusting relationships.
- Integrate fun and joy as a way of being and working, aka doesn't take yourself too seriously.
additional notes Please note: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of employment visa at this time for this role.
compensation and benefits package lululemon's compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. The typical hiring range for this position is from
$179,800 - $236,000 annually ; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program , subject to program eligibility requirements.
At lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedica tion, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:
- Extended health and dental benefits, and mental health plans
- Paid time off
- Savings and retirement plan matching
- Generous employee discount
- Fitness & yoga classes
- Parenthood top-up
- Extensive catalog of development course offerings
- People networks, mentorship programs, and leadership series (to name a few)
Note: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.
workplace arrangement Hybrid
In-person collaboration and connection is important to our culture. Work is performed onsite, minimum 4 days per week.
#LI-AF1
Job Tags
Permanent employment, Part time, Work visa