Cybersecurity Engineer

About the Role

Workday is hiring a Cybersecurity Engineer for the Security Automation & Integration Engineering team to build agent harnesses, evals, schemas, integrations, and application UIs that enable detection, response, and threat-intel teams to operate at machine speed. The role focuses on turning operational security problems into reusable software, leveraging Python and AI-augmented development to deliver production-grade integrations and tools.

Explicitly uses LLMs and agent frameworks and emphasizes AI-augmented development and eval for security automation.

Location: Reston, VA

Salary: USD 130,200 - 195,400/year

Type: Full-time

Posted: 2 days ago

Category: Software Engineering

Company Rating: 3.8 (232 reviews)

Company Size: 10k+

Vibe Markers: 💻 Open Source, 🔥 Hot

Experience Level: Senior

Job Description

Role

Workday’s Security Automation & Integration Engineering (SecAIE) team seeks a Cybersecurity Engineer to own agent-adjacent application work (eval harnesses, agent scaffolds, and UIs), design and evolve schemas/data contracts, and build integrations across security tools and enterprise platforms to accelerate detection and response workflows. The role emphasizes shipping production software, partnering with security domain experts, and using AI-augmented tooling responsibly.

Key Responsibilities

• Own agent-adjacent application work: eval harnesses, agent scaffolds, and UIs used by security partners.
• Design, build, and evolve schemas and data contracts so agents and humans share the same objects.
• Take partner requests from vague to shipped: scope, propose, implement, review, roll out, and operationalize (eval, tracing, runbooks).
• Build and maintain integrations across security tools and enterprise platforms (SOAR, SIEM, vulnerability scanners, ticketing) as needed.
• Raise the team’s AI-augmented engineering floor: shared skills, reusable scaffolds, review discipline for AI-generated code, and eval that catches drift.
• Iterate quickly: prototype, test, ship, learn, and improve.

Requirements

Basic Qualifications

• Strong Python skills with hands-on experience shipping production software (APIs, services, batch jobs, or application backends), including code review, testing, and operational follow-through.
• Hands-on experience building or evaluating LLM/agent systems (harnesses, eval, tracing, or agentic pipelines) or demonstrated AI-augmented development (e.g., Copilot, coding agents) with a point of view on where they help.
• Comfort designing or evolving schemas/data contracts and application UIs that operate on real data.
• Working knowledge of core cybersecurity practices: identity and access, secrets handling, secure-by-default configuration, and reasoning over common security data (vulnerabilities, incidents, identity, threat intel).
• Ability to own what you ship (runbooks, basic observability, eval that still runs after merge).

Other Qualifications / Nice-to-haves

• Experience with agent/eval frameworks such as LangChain, LangGraph, LangSmith or similar; LLM-as-judge or offline eval; tracing and observability for agent runs.
• Frontend experience (React or similar) for internal tools and dashboards on security data.
• Hands-on familiarity with security tools/data for triage and investigation (SIEM, vulnerability scanners, identity systems, orchestration platforms such as Tines).
• Comfort reasoning about shared schemas/data contracts that span team boundaries.
• Cloud/platform familiarity, especially AWS; experience with IaC/tools such as Terraform and Docker is useful.
• Comfortable operating in ambiguous problem spaces and driving solutions end-to-end.

Team

SecAIE builds the unified data foundation, intelligent automation, and decision support tools for Workday Security and Trust, enabling security teams to make data-driven decisions at machine speed. The team values curiosity, pragmatism, and collaboration, and is actively leveraging AI to augment security engineering.

Compensation & Work Arrangement

• Primary location base pay range: $130,200 USD - $195,400 USD. Additional US ranges and Colorado-specific ranges are provided in the posting.
• Flexible work model: teams spend at least 50% of their time in-office or in the field each quarter; remote “home office” roles have flexibility to come together for key moments.

Tech Stack

Python, LangChain, LangGraph, LangSmith, React, SIEM, SOAR, Tines, AWS, Terraform, Docker, LLM, Copilot, agentic pipelines, vulnerability scanners

Skills

System Design, Data Modeling, Schema Design, Integration Development, Security Engineering Fundamentals, AI-augmented Development, Prototyping, Testing, Observability, Operational Readiness, Code Review, Collaboration, Partner Management, Communication, Problem Solving, Product/Project Ownership

Benefits

• Flex Work (>=50% in-office per quarter)
• Eligible for Workday Bonus Plan
• Annual refresh stock grants
• Comprehensive benefits (details provided by company)
• Flexible schedule and remote/home office options
• Pay range transparency