Cybersecurity Engineer

Role

Workday’s Security Automation & Integration Engineering (SecAIE) team seeks a Cybersecurity Engineer to own agent-adjacent application work (eval harnesses, agent scaffolds, and UIs), design and evolve schemas/data contracts, and build integrations across security tools and enterprise platforms to accelerate detection and response workflows. The role emphasizes shipping production software, partnering with security domain experts, and using AI-augmented tooling responsibly.

Key Responsibilities

• Own agent-adjacent application work: eval harnesses, agent scaffolds, and UIs used by security partners.
• Design, build, and evolve schemas and data contracts so agents and humans share the same objects.
• Take partner requests from vague to shipped: scope, propose, implement, review, roll out, and operationalize (eval, tracing, runbooks).
• Build and maintain integrations across security tools and enterprise platforms (SOAR, SIEM, vulnerability scanners, ticketing) as needed.
• Raise the team’s AI-augmented engineering floor: shared skills, reusable scaffolds, review discipline for AI-generated code, and eval that catches drift.
• Iterate quickly: prototype, test, ship, learn, and improve.

Requirements

Basic Qualifications

• Strong Python skills with hands-on experience shipping production software (APIs, services, batch jobs, or application backends), including code review, testing, and operational follow-through.
• Hands-on experience building or evaluating LLM/agent systems (harnesses, eval, tracing, or agentic pipelines) or demonstrated AI-augmented development (e.g., Copilot, coding agents) with a point of view on where they help.
• Comfort designing or evolving schemas/data contracts and application UIs that operate on real data.
• Working knowledge of core cybersecurity practices: identity and access, secrets handling, secure-by-default configuration, and reasoning over common security data (vulnerabilities, incidents, identity, threat intel).
• Ability to own what you ship (runbooks, basic observability, eval that still runs after merge).

Other Qualifications / Nice-to-haves

• Experience with agent/eval frameworks such as LangChain, LangGraph, LangSmith or similar; LLM-as-judge or offline eval; tracing and observability for agent runs.
• Frontend experience (React or similar) for internal tools and dashboards on security data.
• Hands-on familiarity with security tools/data for triage and investigation (SIEM, vulnerability scanners, identity systems, orchestration platforms such as Tines).
• Comfort reasoning about shared schemas/data contracts that span team boundaries.
• Cloud/platform familiarity, especially AWS; experience with IaC/tools such as Terraform and Docker is useful.
• Comfortable operating in ambiguous problem spaces and driving solutions end-to-end.

Team

SecAIE builds the unified data foundation, intelligent automation, and decision support tools for Workday Security and Trust, enabling security teams to make data-driven decisions at machine speed. The team values curiosity, pragmatism, and collaboration, and is actively leveraging AI to augment security engineering.

Compensation & Work Arrangement

• Primary location base pay range: $130,200 USD - $195,400 USD. Additional US ranges and Colorado-specific ranges are provided in the posting.
• Flexible work model: teams spend at least 50% of their time in-office or in the field each quarter; remote “home office” roles have flexibility to come together for key moments.