2 days ago
Responsibilities
- Support endpoint least-privilege policies, publisher allow-listing, application governance, application triage, and exception reviews across macOS and Windows fleets.
- Monitor endpoint security sensor health, tune detections, and build automated detection and containment response workflows across the enterprise EDR environment.
- Configure SSPM policies, investigate SaaS configuration drift and privileged account anomalies, and remediate enterprise SaaS integration risks.
- Drive asset governance, device coverage validation, security control gap identification, queries, dashboards, and correlation alerts through CAASM.
- Implement runtime guardrails and least-privilege boundaries for developer AI tools, coding assistants, open-source dependencies, and IDE integrations.
- Build agentic evaluation pipelines and API-driven integrations connecting endpoint, SaaS posture, and asset signals to automation and threat-containment pipelines.
- Mentor associate and mid-level engineers and author technical runbooks, architecture diagrams, and operational playbooks.
Requirements
- At least 7 years of hands-on cybersecurity engineering experience in enterprise environments.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related discipline.
- At least one recognized credential such as CISSP, a GIAC certification, CompTIA Security+, or an equivalent vendor-recognized credential.
- Hands-on experience engineering, administering, or deploying enterprise tooling in at least two of EDR, SSPM, CAASM, or EPM/Application Control.
- Working knowledge of macOS and Windows internals, execution controls, enterprise scripting, and REST APIs.
- Experience with attack surface analysis, security engineering, security audits, incident response planning, threat and vulnerability management, and enterprise security operations.
- Proficiency in one or more programming languages for automation, process improvement, and API integration.
- Strong written and verbal communication, prioritization, operational judgment, and interest in mentoring fellow engineers.
Benefits
- Flexible work arrangement requiring at least 50% of each quarter in the office or in the field, with remote home-office flexibility.
- Eligibility may include the Workday Bonus Plan or role-specific commission/bonus and annual refresh stock grants.
- Workday provides mentorship, talent development, reasonable accommodations, and equal employment opportunity.
- EU location base salary range is €84,000–€126,000 EUR for Ireland.
About Workday
Workday builds cloud-based enterprise applications for human capital management and financial management, including payroll, time tracking, expenses, planning, and procurement, sold on a subscription basis with professional services. Founded in 2005 and headquartered in Pleasanton, California, it is a public company traded on NASDAQ as WDAY. Organizations worldwide use Workday to unify HR and finance data, automate processes, and apply AI to workforce and financial operations.