[Remote] Product Security Detection Engineer
Note: The job is a remote job and is open to candidates in USA. Ciena is a global leader in high-speed connectivity committed to a people-first approach. They are seeking a hands-on technical leader to design, build, and operationalize a Detection Engineering framework across product lines, ensuring products are observable and defensible.
Responsibilities
- Lead the design and implementation of Ciena’s Detection Engineering framework, covering logging, auditing, alerting, TTP-based detections, vulnerability exposure checks, and hardening compliance automation
- Define logging and telemetry standards for product teams, ensuring events are structured, consistent, and SIEM-ready
- Translate findings from Pen Testing, PSIRT, and Threat Intelligence into reusable, product-specific detections and alert packs
- Architect and maintain custom detection scripts and automation
- Develop metrics and dashboards to measure Mean Time to Detect (MTTD), detection precision, coverage, and compliance posture
- Partner with R&D, PLM, and Compliance teams to embed detection checkpoints into the product lifecycle and ensure regulatory alignment (NIST, ISO, EU CRA, NIS2, etc.)
- Mentor engineers on detection rule creation, data quality, and event design
- Present program progress and outcomes to senior leadership, security councils, and customer security reviews
Skills
- Strong experience in security engineering, telemetry, SIEM integrations, detection content development
- Ability to bridge product development, PSIRT, and offensive security insights into actionable detections
- Lead the design and implementation of Ciena's Detection Engineering framework, covering logging, auditing, alerting, TTP-based detections, vulnerability exposure checks, and hardening compliance automation
- Define logging and telemetry standards for product teams, ensuring events are structured, consistent, and SIEM-ready
- Translate findings from Pen Testing, PSIRT, and Threat Intelligence into reusable, product-specific detections and alert packs
- Architect and maintain custom detection scripts and automation
- Develop metrics and dashboards to measure Mean Time to Detect (MTTD), detection precision, coverage, and compliance posture
- Partner with R&D, PLM, and Compliance teams to embed detection checkpoints into the product lifecycle and ensure regulatory alignment (NIST, ISO, EU CRA, NIS2, etc.)
- Mentor engineers on detection rule creation, data quality, and event design
- Present program progress and outcomes to senior leadership, security councils, and customer security reviews
- 8+ years in security engineering, detection engineering, or product security
- Strong understanding of logging architectures, telemetry design, and SIEM technologies (Splunk, QRadar, Elastic, Sentinel, etc.)
- Hands-on experience with threat detection logic, MITRE ATT&CK mapping, and detection-as-code principles
- Proficiency in Python, JSON, and scripting for automation and data normalization
- Familiarity with NIST 800-53, ISO 27001, CIS Benchmarks, and industry regulatory requirements for logging and monitoring
- Experience working with vulnerability management, PSIRT processes, or red/blue team findings
- Excellent communication skills to interface with product managers, engineers, and executive stakeholders
- Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field
Benefits
- Non-Sales employees may be eligible for a discretionary incentive bonus
- Sales employees may be eligible for a sales commission
- Medical, dental, and vision plans
- Participation in 401(K) (USA) & DCPP (Canada) with company matching
- Employee Stock Purchase Program (ESPP)
- Employee Assistance Program (EAP)
- Company-paid holidays
- Paid sick leave
- Vacation time
- We also comply with all applicable laws regarding Paid Family Leave and other leaves of absence
Company Overview
Company H1B Sponsorship