Product Security Detection Engineer leading the design and operationalization of detection capabilities for Ciena's products. Fostering a security-aware culture by integrating detection checkpoints throughout the product lifecycle.
Responsibilities
Lead the design and implementation of Ciena’s Detection Engineering framework, covering logging, auditing, alerting, TTP-based detections, vulnerability exposure checks, and hardening compliance automation.
Define logging and telemetry standards for product teams, ensuring events are structured, consistent, and SIEM-ready.
Translate findings from Pen Testing, PSIRT, and Threat Intelligence into reusable, product-specific detections and alert packs.
Architect and maintain custom detection scripts and automation.
Develop metrics and dashboards to measure Mean Time to Detect (MTTD), detection precision, coverage, and compliance posture.
Partner with R&D, PLM, and Compliance teams to embed detection checkpoints into the product lifecycle and ensure regulatory alignment (NIST, ISO, EU CRA, NIS2, etc.).
Mentor engineers on detection rule creation, data quality, and event design.
Present program progress and outcomes to senior leadership, security councils, and customer security reviews.
Requirements
8+ years in security engineering, detection engineering, or product security
Strong understanding of logging architectures, telemetry design, and SIEM technologies (Splunk, QRadar, Elastic, Sentinel, etc.)
Hands-on experience with threat detection logic, MITRE ATT&CK mapping, and detection-as-code principles
Proficiency in Python, JSON, and scripting for automation and data normalization
Familiarity with NIST 800-53, ISO 27001, CIS Benchmarks, and industry regulatory requirements for logging and monitoring
Experience working with vulnerability management, PSIRT processes, or red/blue team findings
Excellent communication skills to interface with product managers, engineers, and executive stakeholders
Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field
Benefits
medical, dental, and vision plans
participation in 401(K) (USA) & DCPP (Canada) with company matching
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.