{"id":1548787,"url":"https://alion.io/job/lumentum-technical-manager-product-security-vulnerability-management-software-assurance","title":"Technical Manager – Product Security, Vulnerability Management & Software Assurance","company":{"id":5264,"name":"Lumentum","domain":"lumentum.com","url":"https://alion.io/company/lumentum","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":38,"ghost_share":0,"stale_share":0.921,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ottawa, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":76000,"max_usd":152000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":42},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"CWE","optional":false},{"name":"Linux","optional":false},{"name":"SBOM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"CodeQL","optional":true},{"name":"GCP","optional":true},{"name":"Google Cloud Run","optional":true},{"name":"gRPC","optional":true},{"name":"PKI","optional":true},{"name":"Rest API","optional":true},{"name":"SLSA","optional":true}],"status":"live","first_seen_at":"2026-09-30T23:05:19Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-21T04:35:47Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"It's fun to work in a company where people truly BELIEVE in what they're doing!\nWe're committed to bringing passion and customer focus to the business.\nIf you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!\nLumentum Canada was awarded the 2022 National Capital Region’s Top Employers for the 6th consecutive year and the 2022 Career Directory Canada’s Best Employers for Recent Graduates for the 5th consecutive year. \nAbout Lumentum\nAt Lumentum, we’re building the tech behind the world’s fastest networks and most advanced systems. Our optical and photonic solutions power everything from AI and cloud computing to data centers, telecom, and advanced manufacturing.\nWe’re a global team of innovators working where light meets technology, solving big challenges that keep the world connected and moving forward. If shaping the future of connectivity excites you, you’ll fit right in.\nWhy You’ll Love This Role\nWe are seeking a Technical Manager to lead a team responsible for product vulnerability management, software assurance, secure manufacturing processes, and cloud-based security applications. This role will oversee the identification, assessment, remediation, and reporting of software vulnerabilities across embedded and network products.\nThe manager will also lead the development of a secure cloud application and supporting APIs for exchanging device information with customers. This may include certificates, device identity, software versions, security status, SBOMs, vulnerability data, VEX reports, attestation results, and lifecycle information.\nThe role will work closely with software engineering, product security, cloud engineering, manufacturing, and customer-facing teams.\nWhat You’ll Be Doing\nLead, mentor, and develop a team responsible for software security, vulnerability management, and cloud security applications.\nEstablish processes for identifying, analyzing, prioritizing, remediating, and tracking software vulnerabilities.\nManage Black Duck and related Software Composition Analysis tools, including project configuration, scanning, policy review, reporting, and issue resolution.\nOversee the creation, validation, and distribution of SBOM and VEX reports.\nDefine vulnerability triage criteria using severity, exploitability, product exposure, reachability, and customer impact.\nLead the use of AI-assisted code scanning and security analysis while ensuring findings are validated by qualified engineers.\nDevelop secure software-signing processes, including key management, signing workflows, access control, auditability, and protection against unauthorized signing.\nSecure and review software manufacturing procedures, including build integrity, artifact provenance, release controls, and production access.\nManage the development of a secure cloud application for exchanging device and product-security information with customers.\nEstablish mechanisms for securely ingesting and sharing device information, including device identity, software versions, SBOMs, vulnerabilities, VEX status, attestation results, and security events.\nCoordinate vulnerability remediation with development and release teams.\nPromote secure software development practices, threat modeling, code review, and security testing.\nWhat We’re Looking For\nEducation:\nBachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related field.\nExperience:\nExperience leading software security, product security, vulnerability management, application security, or cloud security teams.\nStrong understanding of vulnerability management, CVE analysis, CVSS, CWE, SBOM, VEX, and software supply-chain security.\nExperience with Black Duck, SCA tools, code scanning, or comparable security platforms.\nExperience defining and operating software-signing and release-security processes.\nExperience leading the development of cloud applications, secure APIs, or customer-facing security platforms.\nKnowledge of cloud security principles, identity and access management, encryption, API security, audit logging, and secure data exchange.\nExperience working with embedded Linux, networking software, or complex hardware/software products.\nStrong communication, project management, and cross-functional leadership skills.\nAbility to translate complex security findings into clear engineering and business decisions.\nAsset/Nice to Have\nExperience with GCP, Cloud Run, API gateways, cloud databases, cloud KMS, or cloud-based certificate authorities.\nExperience with REST, gRPC, OAuth 2.0, OIDC, mTLS, PKI, and multi-tenant application design.\nExperience with SONiC, Linux, containers, firmware, networking, or telecommunications products.\nFamiliarity with SPDX, CycloneDX, CSAF, VEX, SLSA, and SBOM conformance.\nExperience with CodeQL, Coverity, Blackduck, or similar tools.\nKnowledge of cryptographic key management, HSMs, cloud KMS, PKI, and trusted build environments.\nExperience securing manufacturing, provisioning, or product-release operations.\nSuccess in This Role\nSuccess means establishing a predictable vulnerability-remediation process, improving the quality and timeliness of SBOM and VEX reports, protecting software-signing operations, reducing software supply-chain risk, and delivering a secure cloud platform that enables customers to exchange and review trusted device and product-security information.\nPerks You’ll Love\nFlexible time off\nHealth and wellness benefits (physical and mental)\nTuition reimbursement and career growth support\nA workplace built for you: free gym, games room, prayer room\nSubsidized meals, free coffee/tea\nEmployee stock options and incentive plans\nA collaborative, innovative, and inclusive culture\nSalary Range\nThe salary range for this position is $130,000 - $180,000 CAD (Flexible).\nFinal compensation will be determined based on factors such as experience, skills, and qualifications. In line with our commitment to being a great place to work, Lumentum offers competitive total rewards which may include annual bonus, equity, and comprehensive health and welfare benefits.\nJoin a Team That’s Shaping the Future\nAt Lumentum, we’re more than just a workplace-we’re a launchpad for creativity and innovation. We’re committed to celebrating your unique talents and helping you grow. Our guiding principles-Innovate, Engage, Deliver, Excel, and Win-aren’t just words; they’re the heart of what we do.\nLet’s Build a Brighter Future Together!\nWe’re committed to building an inclusive workplace where everyone feels valued and empowered. We welcome applicants from all backgrounds and provide accommodations for individuals with disabilities throughout the hiring process. Your uniqueness makes us stronger, sparks creativity, and drives our success.\nPlease contact us at  to request accommodation.\nJoin us-your future starts here!","description_format":"text","description_chars":6867,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Stock options"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Optical Communications"],"lifecycle":[{"event":"open","at":"2026-09-30T23:05:19Z"}],"visa":[],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":1,"p_active":0.59,"p_room":0.9,"age_days":20,"expected_fill_days":35,"reasons":["conf:1","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/lumentum-technical-manager-product-security-vulnerability-management-software-assurance","json_url":"https://alion.io/job/lumentum-technical-manager-product-security-vulnerability-management-software-assurance.json","meta":{"generated_at":"2026-10-21T09:37:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13597,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5264},"rest":"https://alion.io/mcp/rest/get_company?id=5264"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flumentum-technical-manager-product-security-vulnerability-management-software-assurance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flumentum-technical-manager-product-security-vulnerability-management-software-assurance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flumentum-technical-manager-product-security-vulnerability-management-software-assurance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lumentum-technical-manager-product-security-vulnerability-management-software-assurance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flumentum-technical-manager-product-security-vulnerability-management-software-assurance"}]}