Lead defensive threat research on generative and agentic AI systems at RBC. Identify emerging threats and develop proof - of - concept exploits to enhance AI security.
About the role
- Product Security Detection Engineer leading the design and operationalization of detection capabilities for Ciena's products. Fostering a security-aware culture by integrating detection checkpoints throughout the product lifecycle.
Responsibilities
- Lead the design and implementation of Ciena’s Detection Engineering framework, covering logging, auditing, alerting, TTP-based detections, vulnerability exposure checks, and hardening compliance automation.
- Define logging and telemetry standards for product teams, ensuring events are structured, consistent, and SIEM-ready.
- Translate findings from Pen Testing, PSIRT, and Threat Intelligence into reusable, product-specific detections and alert packs.
- Architect and maintain custom detection scripts and automation.
- Develop metrics and dashboards to measure Mean Time to Detect (MTTD), detection precision, coverage, and compliance posture.
- Partner with R&D, PLM, and Compliance teams to embed detection checkpoints into the product lifecycle and ensure regulatory alignment (NIST, ISO, EU CRA, NIS2, etc.).
- Mentor engineers on detection rule creation, data quality, and event design.
- Present program progress and outcomes to senior leadership, security councils, and customer security reviews.
Requirements
- 8+ years in security engineering, detection engineering, or product security
- Strong understanding of logging architectures, telemetry design, and SIEM technologies (Splunk, QRadar, Elastic, Sentinel, etc.)
- Hands-on experience with threat detection logic, MITRE ATT&CK mapping, and detection-as-code principles
- Proficiency in Python, JSON, and scripting for automation and data normalization
- Familiarity with NIST 800-53, ISO 27001, CIS Benchmarks, and industry regulatory requirements for logging and monitoring
- Experience working with vulnerability management, PSIRT processes, or red/blue team findings
- Excellent communication skills to interface with product managers, engineers, and executive stakeholders
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field
Benefits
- medical, dental, and vision plans
- participation in 401(K) (USA) & DCPP (Canada) with company matching
- Employee Stock Purchase Program (ESPP)
- Employee Assistance Program (EAP)
- company-paid holidays
- paid sick leave
- vacation time
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
System Security Administrator managing and securing eStruxture's IT infrastructure. Collaborating on security projects and ensuring operational excellence in data centers.
Bug Bounty Security Researcher identifying and reporting vulnerabilities in software applications and systems for Inspectiv. Contributing to improving security and participating in bug bounty programs.
Information Security Engineer safeguarding digital infrastructure at Forward Financing. Building automation workflows and enhancing security measures through proactive solutions and incident response.
Software Engineer focusing on security features for AI systems at Cohere, contributing to production security and secure coding practices.
Senior Security Engineer supporting end - to - end security architecture and compliance for healthcare AI startup. Designing Azure security solutions and partnering with engineering teams for integrated security throughout SDLC.
Security Engineer at Asymmetric Research specializing in security for L1/L2 blockchains and DeFi protocols. Design controls, conduct audits, and analyze vulnerabilities in Rust - based platforms.
Coordonnatrice en santé et sécurité au travail chez EXP, contribuant à la prévention et à la formation. Collaborant avec les équipes pour maintenir un environnement de travail sûr.
Senior Manager, IAM Control Assurance supporting identity and access management compliance within a global financial organization. Collaborating with cross - functional teams for regulatory and audit compliance.
Information Security Engineer at Deel ensuring cybersecurity for global operations. Act as SME in implementing security tools and frameworks across remote endpoints and cloud assets.