Cybersecurity Engineer - US Federal

Workday•Reston, VA

16h•Hybrid

About The Position

This role will support one or more direct or indirect contracts with the U.S. Federal Government which, due to federal government security requirements, mandates that all Workday personnel working on the contracts be United States citizens (naturalized or native). As a member of our Platform Security Engineering team, you will be responsible for the architecture, engineering, and maintenance of the systems that protect the Workday product. Operating entirely within AWS, you will treat "Security as Code," ensuring our Vulnerability Management, SIEM, and SOAR tools are robust, scalable, and automated. You are the primary engineering partner to our SOC, building the high-fidelity tools they rely on to keep our customers safe.

Requirements

Deep experience engineering within AWS (Compute, Storage, Networking, and Security services).
Strong hands-on experience with Kubernetes (K8s) and Docker.
You understand how to secure containerized environments and manage their lifecycle.
Advanced skills in Python.
Proven experience with Infrastructure as Code (IaC) (e.g., Terraform).
You must be comfortable and proficient in using AI tools to complement your daily functions.
Ability to synthesize data and present it visually to stakeholders.
Applicants must have the ability to obtain and maintain a U.S. government issued security clearance.
United States citizens (naturalized or native).

Nice To Haves

An active TS/SCI w/CI Poly is preferred.
Experience building or maintaining GitLab CI, GitHub Actions, or Jenkins pipelines.
Specific experience with Amazon Elastic Kubernetes Service (EKS).
Experience securing large-scale, customer-facing SaaS products.

Responsibilities

Design and maintain the lifecycle of our core security stack (Vulnerability Management, SIEM, and SOAR) in a native AWS environment.
Secure, manage, and monitor Kubernetes clusters and containerized workloads.
Ensure our tooling scales alongside our containerized infrastructure.
Use tools like Terraform, CloudFormation, or CDK to deploy and manage security infrastructure, ensuring our environments are version-controlled and immutable.
Leverage Python to bridge the gaps between commercial tools.
Actively use AI tools and LLMs as a "force multiplier" to accelerate development, optimize code, and automate repetitive tasks.
Transform complex security telemetry into actionable, visual insights.
Build dashboards that show our partners exactly where we stand and where the gaps remain.
Work to integrate security tooling into the developer workflow, ensuring our engineering is as agile as the product it protects.