Senior Cybersecurity Engineer - Enterprise Security Engineering

Your work days are brighter here.

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

The Enterprise Security Engineering team is the frontline of Workday's enterprise defense, ensuring that our global corporate environment remains secure, resilient, and ready to support the pace of innovation across the company. We sit at the intersection of endpoint infrastructure, developer enablement, and security automation - protecting Workday's corporate fleet while empowering our engineering community to build and ship with confidence.

Our work spans endpoint privilege management, endpoint detection and response (EDR), SaaS security posture management (SSPM), and the governance of developer tools and emerging AI technologies. In the year ahead, the team will focus on expanding agentic automation pipelines, evolving our application control frameworks to support safe AI adoption, and deepening cross-pillar integration between endpoint, SaaS posture, and threat detection systems.

What makes this team special is our commitment to engineering excellence and to each other. We invest deeply in mentorship and talent development, helping engineers at every level grow their technical depth and take ownership of their domains. If you enjoy solving meaningful security challenges alongside a collaborative, forward-thinking group, this team is for you.

About the Role

As a Senior Cybersecurity Engineer on the Enterprise Security Engineering team, you will bridge strategic architecture and operational delivery. You will take ownership of detection telemetry, SaaS configuration drift, and asset-control gap verification, while providing high-touch escalation support and technical guidance to associate and mid-level engineers.

Key Responsibilities:

• Partner with Principal engineers to support endpoint least-privilege policies, publisher allow-listing controls, and application governance workflows across macOS and Windows fleets. Serve as an escalation point for complex application definition triage and advanced exception reviews.
• Develop engineering oversight, sensor health monitoring, and detection tuning across our enterprise EDR estate. Build and maintain automated detection and containment response workflows, partnering with internal teams to triage complex endpoint telemetry.
• Support the operational posture and policy configuration baseline across our SSPM environment. Identify, investigate, and remediate SaaS configuration drift, privileged account anomalies, and integration risks across critical enterprise SaaS services.
• Drive asset governance, device coverage validation, and security control gap identification through Cyber Asset Attack Surface Management (CAASM). Build queries, automated dashboards, and correlation alerts to ensure full agent coverage and policy compliance across corporate assets.
• Implement and maintain runtime guardrails and least-privilege boundaries for developer AI tools, coding assistants, and open-source dependencies. Partner with architecture leads to monitor and evaluate the security posture of AI agents and IDE integrations across developer endpoints.
• Use agentic evaluation pipelines and automation workflows to streamline intake triage, exception processing, and routine telemetry reviews. Build API-driven integrations that feed endpoint, SaaS posture, and asset signals into central automation and threat-containment pipelines.
• Collaborate closely with and mentor associate and mid-level engineers, sharing best practices around script automation, detection engineering, and incident triage. Author clear technical runbooks, architecture diagrams, and operational playbooks to elevate overall team delivery standards.

About You

Basic Qualifications

• 7+ years of hands-on cybersecurity engineering experience in enterprise environments, with demonstrated success operating at a senior technical level
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related discipline
• At least one recognized credential such as CISSP, a GIAC certification (e.g., GSEC, GCED, GCIA, GCIH, or GDSA), CompTIA Security+, or an equivalent vendor-recognized credential
• Hands-on experience engineering, administering, or deploying enterprise tooling across at least two of the following domains: Endpoint Detection & Response (EDR), SaaS Security Posture Management (SSPM), Cyber Asset Attack Surface Management (CAASM), or Endpoint Privilege Management (EPM) / Application Control
• Working knowledge of macOS and Windows operating system internals, execution controls, and enterprise scripting proficiency (Python, PowerShell, Bash, or Go) with REST API experience
• Clear written and verbal communication skills, with the ability to translate complex security telemetry into actionable guidance for cross-functional partners

Other Qualifications

• Experienced in attack surface analysis, with the ability to understand system architecture, identify potential entry points, and assess the impact of different types of threats to reduce overall organizational vulnerability
• Skilled in security engineering practices, including designing and implementing systems, protocols, and procedures that protect information and data from unauthorized access or damage. Experience conducting security audits and developing incident response plans is valued.
• Proficient with security platforms, including configuring, operating, and managing security software, hardware, and services across an enterprise environment. Familiar with the latest cybersecurity defense strategies and how to apply them operationally.
• Knowledgeable in threat and vulnerability management, with a proactive approach to identifying, assessing, and mitigating potential risks and weaknesses in security infrastructure. Experienced in conducting vulnerability assessments and staying current with the evolving threat landscape.
• Experienced in security operations, including the identification, analysis, and mitigation of threats to enterprise information assets. Comfortable developing and implementing security policies, managing security incidents, and guiding teams on best practices.
• Proficient in one or more programming languages with the ability to design, write, test, and debug code for automation, process improvement, and API integration across security tooling
• Ability to manage multiple projects and priorities while maintaining operational responsibilities, and a genuine interest in mentoring and developing fellow engineers

Workday Pay Transparency Statement (For EU Locations Only)

Listed below is the base salary range applicable to this position. Workday pay ranges (and the precise pay offered to the successful candidate) are based on a number of objective criteria such as relevant experience and skills, and educational qualifications, level of responsibility, demands of the role, work location and business need. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants awarded by Workday Inc. For more information regarding Workday’s comprehensive benefits, please click here.

Our Approach to Flexible Work

With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter.

Pursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records.

Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans.

Workday is committed to providing reasonable accommodations for qualified individuals during our application process, in order to perform one or more essential functions of their job, as well as regarding the use of AI tools for employment decision-making to any degree. Please see below for more details including how to request an accommodation as a qualified veteran, due to a disability or for religious reasons, or as otherwise provided under applicable law.

Workday prohibits taking adverse action against any candidate or employee for reporting a possible violation of this policy, requesting one or more work accommodations, exercising a privacy right, or cooperating in an investigation in accordance with applicable law. Any employee who retaliates against a candidate or employee for doing so may be subject to disciplinary action, up to and including termination of employment, to the fullest extent allowable under applicable law.

If you require a reasonable accommodation, you may email [email protected], as far in advance as possible.

Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!

At Workday, we value our candidates’ privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers.

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.