[Remote] Product Security Detection Engineer

Note: The job is a remote job and is open to candidates in USA. Ciena is a global leader in high-speed connectivity committed to a people-first approach. They are seeking a hands-on technical leader to design, build, and operationalize a Detection Engineering framework across product lines, ensuring products are observable and defensible.

Responsibilities

• Lead the design and implementation of Ciena’s Detection Engineering framework, covering logging, auditing, alerting, TTP-based detections, vulnerability exposure checks, and hardening compliance automation
• Define logging and telemetry standards for product teams, ensuring events are structured, consistent, and SIEM-ready
• Translate findings from Pen Testing, PSIRT, and Threat Intelligence into reusable, product-specific detections and alert packs
• Architect and maintain custom detection scripts and automation
• Develop metrics and dashboards to measure Mean Time to Detect (MTTD), detection precision, coverage, and compliance posture
• Partner with R&D, PLM, and Compliance teams to embed detection checkpoints into the product lifecycle and ensure regulatory alignment (NIST, ISO, EU CRA, NIS2, etc.)
• Mentor engineers on detection rule creation, data quality, and event design
• Present program progress and outcomes to senior leadership, security councils, and customer security reviews

Skills

• Strong experience in security engineering, telemetry, SIEM integrations, detection content development
• Ability to bridge product development, PSIRT, and offensive security insights into actionable detections
• Lead the design and implementation of Ciena's Detection Engineering framework, covering logging, auditing, alerting, TTP-based detections, vulnerability exposure checks, and hardening compliance automation
• Define logging and telemetry standards for product teams, ensuring events are structured, consistent, and SIEM-ready
• Translate findings from Pen Testing, PSIRT, and Threat Intelligence into reusable, product-specific detections and alert packs
• Architect and maintain custom detection scripts and automation
• Develop metrics and dashboards to measure Mean Time to Detect (MTTD), detection precision, coverage, and compliance posture
• Partner with R&D, PLM, and Compliance teams to embed detection checkpoints into the product lifecycle and ensure regulatory alignment (NIST, ISO, EU CRA, NIS2, etc.)
• Mentor engineers on detection rule creation, data quality, and event design
• Present program progress and outcomes to senior leadership, security councils, and customer security reviews
• 8+ years in security engineering, detection engineering, or product security
• Strong understanding of logging architectures, telemetry design, and SIEM technologies (Splunk, QRadar, Elastic, Sentinel, etc.)
• Hands-on experience with threat detection logic, MITRE ATT&CK mapping, and detection-as-code principles
• Proficiency in Python, JSON, and scripting for automation and data normalization
• Familiarity with NIST 800-53, ISO 27001, CIS Benchmarks, and industry regulatory requirements for logging and monitoring
• Experience working with vulnerability management, PSIRT processes, or red/blue team findings
• Excellent communication skills to interface with product managers, engineers, and executive stakeholders
• Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field

Benefits

• Non-Sales employees may be eligible for a discretionary incentive bonus
• Sales employees may be eligible for a sales commission
• Medical, dental, and vision plans
• Participation in 401(K) (USA) & DCPP (Canada) with company matching
• Employee Stock Purchase Program (ESPP)
• Employee Assistance Program (EAP)
• Company-paid holidays
• Paid sick leave
• Vacation time
• We also comply with all applicable laws regarding Paid Family Leave and other leaves of absence

Company Overview

Company H1B Sponsorship