{"id":3550823,"url":"https://alion.io/job/lululemon-cybersecurity-analyst-threat-intelligence-2","title":"Cybersecurity Analyst - Threat Intelligence","company":{"id":39416,"name":"Lululemon","domain":"lululemon.com","url":"https://alion.io/company/lululemon","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Avature","truth_index":{"grade":"A","score":98,"open_postings":11,"ghost_share":0.091,"stale_share":0,"repost_share":0.091,"time_to_fill_p50_days":8,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":122000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":344},"experience_years_min":2,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-10-30T22:36:06Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-01T08:45:23Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"who we are\nlululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.\nabout this team\nThe Threat Intelligence team protects the lululemon community, and the value & reputation of lululemon’s brand from adversarial threats through the pillars of intelligence; partnerships; and tradecraft. This is accomplished by connecting the cyber threat landscape to our business interests, generating timely and actionable intelligence, and cultivating relationships to mitigate those risks. To further enhance our team, we are looking for a Security Analyst on our Threat Intelligence.\ncore responsibilities\nThe Security Analyst - Threat Intelligence will work across the intelligence lifecycle to identify, assess, and communicate cyber threats relevant to lululemon, translating intelligence into actionable insights that strengthen our security posture.\nPartner with stakeholders across lululemon to understand their intelligence needs and translate them into clear intelligence requirements and collection priorities.\nCollect and analyze intelligence from open sources, security partners, vendors, and internal data to identify threats relevant to lululemon and the retail sector.\nResearch threat actors, campaigns, malware, infrastructure, indicators of compromise (IOCs), and tactics, techniques, and procedures (TTPs), with a focus on cybercriminal and ransomware activity.\nProduce clear, actionable intelligence for technical and non-technical audiences, including tactical reporting, threat notifications, and assessments of emerging threats and trends.\nPartner closely with Security Operations (SOC) and Incident Response (IR) teams during investigations, using intelligence to identify threat actors, infrastructure, IOCs, and TTPs and inform response actions.\nLeverage SIEM, EDR, threat intelligence platforms, and other security technologies to investigate adversary activity and translate intelligence into threat hunting, detection, and defensive opportunities.\nResearch and respond to Requests for Information (RFIs) from security leadership and other stakeholders, providing assessments that support informed decision-making.\nHelp mature lululemon's Threat Intelligence capability by developing processes, playbooks, knowledge management, collection strategies, and automation while identifying opportunities to improve how intelligence is operationalized across the organization.\nqualifications\n2-4 years of experience in Cyber Threat Intelligence, Security Operations, Incident Response, Threat Hunting, or a related cybersecurity discipline.\nStrong analytical and investigative skills, with the ability to turn technical information into clear, actionable intelligence.\nUnderstanding of threat intelligence concepts and methodologies, including the intelligence lifecycle, IOCs, TTPs, and the MITRE ATT&CK framework.\nKnowledge of common cyber threats and adversary behaviors, with an interest in cybercriminal and ransomware ecosystems.\nFamiliarity with security technologies such as SIEM, EDR, threat intelligence platforms, and other defensive security tools.\nWorking knowledge of networking, operating systems, and security event logs, with familiarity in query or scripting languages such as KQL, SQL, or Python.\nStrong written and verbal communication skills, with the ability to communicate technical findings to both technical and non-technical audiences.\nCurious, collaborative, and comfortable working independently across teams to solve problems and identify opportunities for improvement.\nmust haves\nAcknowledge the presence of choice in every moment and take personal responsibility for your life.\nPossess an entrepreneurial spirit and continuously innovate to achieve great results. \nCommunicate with honesty and kindness and create the space for others to do the same. \nLead with courage, knowing the possibility of greatness is bigger than the fear of failure. \nFoster connection by putting people first and building trusting relationships. \nIntegrate fun and joy as a way of being and working, aka doesn’t take yourself too seriously. \nadditional notes\nPlease note: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of employment visa at this time for this role.\ncompensation and benefits package\nlululemon’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. The typical hiring range for this position is from $124,500 - 163,400 annually; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.\nAt lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedication, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:\nExtended health and dental benefits, and mental health plans \nPaid time off \nSavings and retirement plan matching \nGenerous employee discount \nFitness & yoga classes \nParenthood top-up \nExtensive catalog of development course offerings \nPeople networks, mentorship programs, and leadership series (to name a few) \nNote: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.\n\nworkplace arrangement\nHybrid\nIn-person collaboration and connection isimportant to our culture. Work is performed onsite, minimum 4 days per week.","description_format":"text","description_chars":6491,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Threat Intelligence","Information Security","Apparel & Fashion Brands"],"lifecycle":[{"event":"open","at":"2026-10-30T22:36:06Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 31 · green card filings: 38","filings_12m":31,"filings_prev_12m":49,"green_card_filings_12m":38,"median_offered_wage_usd":186993,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":15}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":8,"reasons":["conf:1","velocity","win:early","comp:junior,brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/lululemon-cybersecurity-analyst-threat-intelligence-2","json_url":"https://alion.io/job/lululemon-cybersecurity-analyst-threat-intelligence-2.json","meta":{"generated_at":"2026-11-01T10:21:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15998,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":39416},"rest":"https://alion.io/mcp/rest/get_company?id=39416"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flululemon-cybersecurity-analyst-threat-intelligence-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flululemon-cybersecurity-analyst-threat-intelligence-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flululemon-cybersecurity-analyst-threat-intelligence-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lululemon-cybersecurity-analyst-threat-intelligence-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flululemon-cybersecurity-analyst-threat-intelligence-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3550823}},{"tool":"search_jobs","arguments":{"company":"lululemon.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3550823},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}