Product Security Engineer

Job description

As the global leader in high-speed connectivity, Ciena is committed to a people-first approach. Our teams enjoy a culture focused on prioritizing a flexible work environment that empowers individual growth, well-being, and belonging. We’re a technology company that leads with our humanity—driving our business priorities alongside meaningful social, community, and societal impact. Ciena’s Product Security team plays a critical role in ensuring that products are designed, built, and released with security at their core. This role contributes directly to protecting customers by embedding security throughout the product lifecycle and enabling effective vulnerability response. The position partners closely with engineering and cross‑functional teams to strengthen product resilience and trust. How you will make an impact: Drive product security activities across the product development lifecycle, including design reviews, threat modelling, security testing, and release readiness. Execute product penetration testing, vulnerability validation, exploitability analysis, and remediation verification. Partner with engineering teams to identify, track, and remediate product security issues. Contribute to PSIRT operations through vulnerability intake, triage, impact analysis, coordination with product teams, and advisory preparation. Maintain and evolve product security guidelines, secure development practices, and security requirements. Manage and operate the Product Security lab environment, including systems, tools, test environments, networking, logging, and access controls. Enable accurate security testing through the creation and maintenance of customer‑like lab environments and relevant telemetry and logging data. The must haves: Experience: 3 to 5 years of experience in product security, application security, penetration testing, infrastructure security, lab operations, or a related technical security role. Application of penetration testing tools and techniques in a product or lab environment. Application of vulnerability assessment, exploit validation, and remediation verification practices. Application of Linux systems administration, networking fundamentals, and security hardening techniques. Experience collaborating with product engineering teams to resolve security issues. Exposure to PSIRT or vulnerability management processes. Ability to troubleshoot systems, lab environments, network connectivity, and security tooling. Application of common security frameworks and standards such as OWASP, CVSS, CWE, NIST, or secure SDLC practices. Ability to communicate technical risk clearly to technical and non‑technical stakeholders. Ability to manage multiple priorities and drive issues to closure. Nice to haves: Exposure to third‑party penetration testing coordination, evidence collection, and remediation follow‑up. Experience supporting centralized logging, telemetry collection, or detection engineering activities. Background in maintaining customer‑representative lab or test environments. #LI-MP1 At Ciena, we are committed to building and fostering an environment in which our employees feel respected, valued, and heard. Ciena values the diversity of its workforce and respects its employees as individuals. We do not tolerate any form of discrimination. Ciena is an Equal Opportunity Employer, including disability and protected veteran status. If contacted in relation to a job opportunity, please advise Ciena of any accommodation measures you may require.