Principal Security Engineer

Workiva Inc.

4d•$177,000 - $284,000

About The Position

The Principal Security Engineer will work with architecture and infrastructure teams to direct the design and development of Workiva security architectures to protect data deployed into multiple cloud systems. This position prioritizes long-term security architecture, the integration of AI-driven security tooling, and DevSecOps maturity. You will help lead the security vision and strategy across all platforms, and partner with leaders across the business to identify key risks and opportunities to enhance Workiva's cloud security posture. What you'll do Leads business and technical partners with expert knowledge of relevant security technologies. Applies innovative techniques to address emerging technologies, specifically focusing on AI integration and modern cloud security paradigms. Prepares and analyzes overall security architecture and detailed systems specifications for complex security systems Serves as InfoSec Ambassador and lead technical representative to Infrastructure and Reliability and R&D as a whole. Leads discussion with stakeholder teams regarding best practices in design and implementation of secure cloud systems Leads initiatives designed to share knowledge across InfoSec, R&D, and Technology teams. Identifies, recommends, coordinates, and delivers timely knowledge to support teams regarding technologies, processes or tools. Develops and executes strategies to increase Cloud Security knowledge throughout the enterprise. Represents Security Platform in development and implementation of the overall global enterprise cloud architecture Designs, develops, and implements cloud-native architectures that will allow requirements to be met with appropriate security controls present.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field; or 8 years and a Master’s degree; or a PhD with 6 years of experience; or equivalent practical experience
Min 10 years experience with Security Architecture and/or Engineering
Min 5 years minimum experience with Cloud platforms

Nice To Haves

In-depth knowledge of Cloud services relevant to Workiva's infrastructure, their configuration, and common security problems
Experience using, implementing, or securing Artificial Intelligence technologies. Candidates must demonstrate an "AI-first" mindset in solving modern security challenges
Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes
Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms
Experience with deployment orchestration, automation, and security configuration management
Experience performing threat modeling and design reviews to assess security implications and requirements for introduction of new technologies
Strong interpersonal and communication skills, with the ability to be successful in a team environment
Ability to work independently with minimal direction
Technical writing experience

Responsibilities

Leads business and technical partners with expert knowledge of relevant security technologies.
Applies innovative techniques to address emerging technologies, specifically focusing on AI integration and modern cloud security paradigms.
Prepares and analyzes overall security architecture and detailed systems specifications for complex security systems
Serves as InfoSec Ambassador and lead technical representative to Infrastructure and Reliability and R&D as a whole.
Leads discussion with stakeholder teams regarding best practices in design and implementation of secure cloud systems
Leads initiatives designed to share knowledge across InfoSec, R&D, and Technology teams.
Identifies, recommends, coordinates, and delivers timely knowledge to support teams regarding technologies, processes or tools.
Develops and executes strategies to increase Cloud Security knowledge throughout the enterprise.
Represents Security Platform in development and implementation of the overall global enterprise cloud architecture
Designs, develops, and implements cloud-native architectures that will allow requirements to be met with appropriate security controls present.