Sr Cybersecurity Engineer

Workday•Reston, VA

1d•€84,000 - €126,000•Hybrid

About The Position

Workday is seeking a Senior Cybersecurity Engineer to join their Cybersecurity Governance, Risk, Compliance & Trust team. This role is a key technical leadership position responsible for defining and driving the strategic direction and implementation of security controls across the organization's infrastructure. The position requires deep technical expertise in infrastructure security and strong coding/automation skills to industrialize compliance and security processes. The Senior Engineer will lead complex projects, mentor junior staff, and significantly influence security governance decisions. Workday is a Fortune 500 company and a leading AI platform for managing people, money, and agents, focused on shaping the future of work.

Requirements

7+ years of progressive, hands-on experience in engineering, with a strong emphasis on security architecture, leading complex security initiatives, and developing advanced security solutions with 2+ years focused on security governance/compliance.
Extensive and deep hands-on experience architecting, implementing, and securing infrastructure and services within major cloud service providers (e.g., AWS, GCP, Azure) at scale.
Strong proficiency in at least one scripting language (e.g., Python, Go, Bash, Ruby) with the ability to develop automation for security operations, configuration management, and compliance.
Expert-level understanding and practical application of cloud security concepts, principles, architectures, and technologies, with a proven track record of designing and implementing robust, enterprise-grade security controls in complex, multi-cloud environments.
A deep, expert-level understanding of network, application, and platform security, including advanced threat landscapes, attack vectors, and mitigation techniques.
Proven experience in architecting, implementing, and evangelizing secure Infrastructure as Code (IaC) practices and automation at scale using tools like Terraform, CloudFormation, etc.

Nice To Haves

Relevant industry certifications (e.g., AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS)) or equivalent focused training.
Proven experience implementing, auditing, and maintaining controls for major compliance frameworks (NIST CSF, ISO 27001).
Exceptional communication, presentation, and interpersonal skills with the ability to influence and align senior leadership, diverse engineering teams, and non-technical stakeholders.
Proven ability to analyze complex technical security problems and propose pragmatic, business-enabling solutions.
Ability to lead technical security initiatives end-to-end, from conceptual design through successful implementation.
Exceptional ability to communicate highly technical security risks and compliance requirements into clear, quantitative business terms for executive leadership.

Responsibilities

Champion the principle of translating security policies directly into testable, automated code to ensure non-bypassable compliance.
Design and execute the roadmap for industrializing and automating security governance, compliance verification, and control enforcement across the organization.
Drive the adoption of DevSecOps principles by embedding security controls directly into the CI/CD pipeline and contributing secure, reusable modules (e.g., secure Terraform/CloudFormation modules) for engineering teams.