Cybersecurity Engineer

Workday • Boulder, CO

2d • $117,800 - $210,000 • Hybrid

About The Position

The Cybersecurity Engineer will join Workday’s Security Automation & Integration Engineering (SecAIE) team and take primary ownership of agent, evaluation, and application work supporting the Active Defense charter. The role focuses on engineering the tools security partners use, including evaluation harnesses, agent scaffolds, schemas, and user interfaces built on security data. These systems help detection, response, and threat-intelligence teams turn operational needs into working software.

The engineer will apply working knowledge of cybersecurity practices and common security data while partnering with domain experts across the security organization. The role emphasizes transforming ambiguous operational problems into reusable, reliable software; building integrations and shared data foundations; and using AI tooling deliberately to improve security engineering. The position works closely with security leadership, operational teams, engineering teams, and governance and risk teams.

Requirements

• Strong Python skills and hands-on experience shipping production software such as APIs, services, batch jobs, or application backends, including code review, testing, and operational follow-through.
• Hands-on experience building or evaluating LLM or agent systems, such as harnesses, evaluation, tracing, or agentic pipelines; alternatively, strong software-engineering fundamentals plus demonstrated AI-augmented development and a considered perspective on where it helps.
• Comfort designing or evolving schemas and data contracts, as well as application user interfaces that work with real data rather than mock-only prototypes.
• Working knowledge of core cybersecurity practices, including identity and access, secrets handling, secure-by-default configuration, and common security data such as vulnerabilities, incidents, identity, and threat intelligence.
• Comfort owning shipped systems, including runbooks, basic observability, and evaluations that continue to run after changes are merged.

Nice To Haves

• Experience with agent and evaluation tools such as LangChain, LangGraph, or LangSmith, or similar; LLM-as-judge or offline evaluation; and tracing and observability for agent runs.
• Frontend experience with React or similar for internal tools, including watchlist, dashboard, or workflow interfaces built on security data.
• Hands-on experience with security tools or data for triage and investigation, such as SIEM, vulnerability scanners, identity systems, or orchestration platforms such as Tines; curiosity about detection-engineering workflows.
• Comfort reasoning about shared schemas or data contracts spanning team boundaries and treating what, who, and state as first-class artifacts.
• Working familiarity with AWS sufficient to ship and operate; Infrastructure as Code tools such as Terraform or Docker are useful but are not the daily focus.
• Comfort operating in ambiguous problem spaces and helping define solutions rather than only implementing them.

Responsibilities

• Own agent-adjacent application work, including evaluation harnesses, agent scaffolds, and user interfaces security partners use to inspect and act on results.
• Design, build, and evolve schemas and data contracts so agents and people work with shared objects rather than one-off payloads.
• Take partner requests from an ambiguous problem statement through scoping, proposal, design, review, rollout, and operational readiness, including evaluation, tracing, and runbooks.
• Build and maintain integrations across security tools and enterprise platforms, including SOAR, SIEM, vulnerability scanners, and ticketing systems, as needed by applications or agents.
• Improve the team's AI-augmented engineering practices through shared skills, reusable scaffolds, review practices for AI-generated code, and evaluations that detect drift.
• Prototype, test, ship, learn, and improve quickly while bringing the team along.

Benefits

• May be eligible for the Workday Bonus Plan or a role-specific commission or bonus.
• May be eligible for annual refresh stock grants.
• Comprehensive benefits are referenced, but specific benefits are not listed in the posting.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed