3 days ago
Responsibilities
- Set the technical vision and architectural standards for endpoint privilege management and least-privilege enforcement across macOS and Windows fleets.
- Design scalable application control frameworks and runtime guardrails for developer tools, IDE extensions, AI coding assistants, and open-source package dependencies.
- Establish authorization thresholds and safeguards for safe AI adoption.
- Architect automated intake, research, policy-staging, application evaluation, exception triage, and security review pipelines.
- Integrate endpoint privilege controls with SSPM signals, EDR threat detection pipelines, central automation servers, asset correlation tools, and orchestration layers.
- Provide architectural oversight for EDR and SSPM platforms, including detection models, configuration posture, and threat-surface reduction.
- Mentor junior and mid-level engineers and help assess skills, identify growth opportunities, and improve team execution.
- Lead technical design reviews, establish maintainability and operational standards, advise leadership on security roadmaps, engage vendors, and serve as the tier-3 technical escalation authority.
Requirements
- 8+ years of progressive cybersecurity engineering experience, including significant experience in a Principal, Staff, or Lead architectural capacity in enterprise environments.
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related discipline, or equivalent practical experience.
- At least one advanced industry-recognized certification, such as CISSP, GIAC Advanced Certification including GSEC, GDSA, or GCIA, OSCP, or a vendor-equivalent architectural credential.
- Deep expertise architecting and governing enterprise Endpoint Privilege Management platforms across large corporate fleets, including macOS and Windows security architectures, execution controls, code integrity, and privilege boundaries.
- Experience securing developer tooling, IDE ecosystems, AI coding assistants, and local models through runtime guardrails and authorization thresholds.
- Familiarity with enterprise EDR platforms, SSPM frameworks, detection principles, posture management, and API-driven automation pipelines.
- Experience designing secure scalable systems, data protection strategies, security audits, and incident response plans.
- Demonstrated ability to mentor and coach early-career and mid-level engineers and communicate nuanced security trade-offs to senior technical leadership.
- Ability to contribute to multi-quarter roadmaps and represent security engineering in vendor and leadership discussions.
Benefits
- Flexible work arrangement requiring at least 50% of each quarter in the office or in the field, with remote home-office roles also able to meet in offices for important events.
- The role may be eligible for the Workday Bonus Plan or role-specific commission/bonus and annual refresh stock grants; the posting also references comprehensive benefits.
- Workday provides reasonable accommodations and is an equal opportunity employer.
Tech Stack
macOSWindows
Categories
About Workday
Workday builds cloud-based enterprise applications for human capital management and financial management, including payroll, time tracking, expenses, planning, and procurement, sold on a subscription basis with professional services. Founded in 2005 and headquartered in Pleasanton, California, it is a public company traded on NASDAQ as WDAY. Organizations worldwide use Workday to unify HR and finance data, automate processes, and apply AI to workforce and financial operations.