Principal Cybersecurity Engineer

About the role

Strong leadership presence with the ability to set direction, motivate teams, and drive the security mindset across every aspect of the company.
Spearhead the architecture, daily operations, and continuous development of all security response tooling and environments (i.e. SOAR, SIEM, Incident Response, Forensics, Agentic AI).
Contribute to the program vision and implementation of a world class Response program at Workday.
Evolve the response platforms that enable Cyber Defense to operate with precision, automation and innovation.
Lead and support security incident response across the organization.
Help drive team development by mentoring new and existing staff.

Responsibilities

• Strong leadership presence with the ability to set direction, motivate teams, and drive the security mindset across every aspect of the company.
• Spearhead the architecture, daily operations, and continuous development of all security response tooling and environments (i.e. SOAR, SIEM, Incident Response, Forensics, Agentic AI).
• Contribute to the program vision and implementation of a world class Response program at Workday.
• Evolve the response platforms that enable Cyber Defense to operate with precision, automation and innovation.
• Lead and support security incident response across the organization.
• Help drive team development by mentoring new and existing staff.

Requirements

• 10+ years of experience in cybersecurity or information security roles, including 2+ years with hands-on technical leadership experience.
• Bachelor's Degree.
• Other relevant certification/s and training are beneficial (e.g. Offensive Security, SANS, CISSP, Specific Security Tooling, etc.).
• Extensive expertise in architecting and deploying scalable cloud-native security solutions, complemented by a background in software development to facilitate implementation, with a particular focus on rapid prototyping and iterative methodologies.
• Experience with security monitoring and incident response is important, as this knowledge will inform decisions on how to implement the solutions.
• Deep knowledge of scripting languages, artificial intelligence (conversational AI, Generative AI and AI Agents) are essential.
• Proven ability to manage multiple complex projects with various stakeholders outside of their organization, competing priorities, and core operations effectively.
• High ownership and accountability, with comfort leading high-severity incidents.
• A strong intellectual curiosity to rapidly acquire proficiency in emerging technologies and platforms.
• Experience in some or all of the following: Security alert triage, investigation, incident response, and incident management
  Threat hunting and digital forensics
  SIEM and SOAR security technologies and solutions
  Leveraging artificial intelligence to enhance security processes
  Secure Software Development Lifecycle (SSDLC)

Qualifications

• Bachelor's Degree.
• Other relevant certification/s and training are beneficial (e.g. Offensive Security, SANS, CISSP, Specific Security Tooling, etc.).
• Extensive expertise in architecting and deploying scalable cloud-native security solutions, complemented by a background in software development to facilitate implementation, with a particular focus on rapid prototyping and iterative methodologies.
• Experience with security monitoring and incident response is important, as this knowledge will inform decisions on how to implement the solutions.
• Deep knowledge of scripting languages, artificial intelligence (conversational AI, Generative AI and AI Agents) are essential.
• Proven ability to manage multiple complex projects with various stakeholders outside of their organization, competing priorities, and core operations effectively.
• High ownership and accountability, with comfort leading high-severity incidents.
• A strong intellectual curiosity to rapidly acquire proficiency in emerging technologies and platforms.
• Experience in some or all of the following: Security alert triage, investigation, incident response, and incident management
  Threat hunting and digital forensics
  SIEM and SOAR security technologies and solutions
  Leveraging artificial intelligence to enhance security processes
  Secure Software Development Lifecycle (SSDLC)

Skills

• Strong leadership presence with the ability to set direction, motivate teams, and drive the security mindset across every aspect of the company.
• Hands-on technical leadership experience in cybersecurity or information security roles.
• Knowledge of how to apply AI to security response processes.
• Expertise in architecting and deploying scalable cloud-native security solutions.
• Experience with security monitoring and incident response.
• Deep knowledge of scripting languages, artificial intelligence (conversational AI, Generative AI and AI Agents).
• Ability to manage multiple complex projects with various stakeholders.
• High ownership and accountability, with comfort leading high-severity incidents.
• Intellectual curiosity to rapidly acquire proficiency in emerging technologies and platforms.
• Experience in some or all of the following: Security alert triage, investigation, incident response, and incident management
  Threat hunting and digital forensics
  SIEM and SOAR security technologies and solutions
  Leveraging artificial intelligence to enhance security processes
  Secure Software Development Lifecycle (SSDLC)

Benefits

• Flexible work schedule with at least 50% of time spent in the office or with customers, prospects, and partners (depending on role).
• Comprehensive benefits package including health insurance, retirement plans, and paid time off.
• Opportunities for professional growth and development through training and mentorship programs.
• Work in a collaborative and supportive environment with a diverse team of professionals.

Pay

• The annualized base salary ranges for the primary location and any additional locations are listed below.
• As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants.

Schedule

• We offer a hybrid/flexible schedule for employees.