L

Lumentum

Supplies photonic components for networks

Technical Manager - Multiple Teams

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeOttawa, ON, CanadaIn-person

About the Job

Requirements

  • A bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field.
  • Experience leading software security, product security, vulnerability management, application security, or cloud security teams.
  • Strong understanding of vulnerability management, CVE analysis, CVSS, CWE, SBOM, VEX, and software supply-chain security.
  • Experience with Black Duck, Software Composition Analysis tools, code scanning, or comparable security platforms.
  • Experience defining and operating software-signing and release-security processes.
  • Experience leading development of cloud applications, secure APIs, or customer-facing security platforms.
  • Knowledge of cloud security principles, identity and access management, encryption, API security, audit logging, and secure data exchange.
  • Experience working with embedded Linux, networking software, or complex hardware/software products.
  • Strong communication, project management, and cross-functional leadership skills.
  • Ability to translate complex security findings into clear engineering and business decisions.

Responsibilities

  • Lead, mentor, and develop a team responsible for software security, vulnerability management, and cloud security applications.
  • Establish processes for identifying, analyzing, prioritizing, remediating, and tracking software vulnerabilities.
  • Manage Black Duck and related Software Composition Analysis tools, including project configuration, scanning, policy review, reporting, and issue resolution.
  • Oversee the creation, validation, and distribution of SBOM and VEX reports.
  • Define vulnerability triage criteria using severity, exploitability, product exposure, reachability, and customer impact.
  • Lead the use of AI-assisted code scanning and security analysis while ensuring findings are validated by qualified engineers.
  • Develop secure software-signing processes, including key management, signing workflows, access control, auditability, and protection against unauthorized signing.
  • Secure and review software manufacturing procedures, including build integrity, artifact provenance, release controls, and production access.
  • Manage the development of a secure cloud application for exchanging device and product-security information with customers.
  • Establish mechanisms for securely ingesting and sharing device information, including device identity, software versions, SBOMs, vulnerabilities, VEX status, attestation results, and security events.
  • Coordinate vulnerability remediation with development and release teams.
  • Promote secure software development practices, threat modeling, code review, and security testing.

Desired Qualifications

  • Experience with Google Cloud Platform, Cloud Run, API gateways, cloud databases, cloud key management services, or cloud-based certificate authorities.
  • Experience with REST, gRPC, OAuth 2.0, OpenID Connect, mutual TLS, public key infrastructure, and multi-tenant application design.
  • Experience with SONiC, Linux, containers, firmware, networking, or telecommunications products.
  • Familiarity with SPDX, CycloneDX, CSAF, VEX, SLSA, and SBOM conformance.
  • Experience with CodeQL, Coverity, Black Duck, or similar tools.
  • Knowledge of cryptographic key management, hardware security modules, cloud key management services, public key infrastructure, and trusted build environments.
  • Experience securing manufacturing, provisioning, or product-release operations.

About the Company

Lumentum

Supplies photonic components for networks

Lumentum designs and manufactures optical and photonic components for data networks, data centers, sensing, and manufacturing, including diode lasers. Its devices convert electronic signals into light to enable high-speed data transmission and 3D sensing. The company differentiates itself with a broad, high-volume photonics platform that combines silicon photonics, laser diodes for 3D sensing, and integrated optical components for cloud, networking, and manufacturing, supporting large-scale deployment. Its goal is to increase the speed, flexibility, and efficiency of communication networks and sensing systems to meet growing cloud data traffic.

Company size
1,001-5,000
Company stage
IPO
Headquarters
San Jose, CA
Founded
2015

Recently Posted Jobs

Explore more opportunities at Lumentum

See more jobs