# Senior Cybersecurity Engineer

**Company**: Workday
**Location**: Atlanta, GA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: €84,000 EUR - €126,000 EUR
**Category**: Security
**Industry**: Technology

**Apply**: https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USA-GA-Atlanta/Senior-Cybersecurity-Engineer---Enterprise-Security-Engineering_JR-0111221?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-cybersecurity-engineer-cad6664f-944/

## Description

We’re Workday, a leading AI platform for managing people, money, and agents. We're seeking a Senior Cybersecurity Engineer to join our Enterprise Security Engineering team.

**About the Team** The Enterprise Security Engineering team is the frontline of Workday's enterprise defense, ensuring that our global corporate environment remains secure, resilient, and ready to support the pace of innovation across the company.

**About the Role** As a Senior Cybersecurity Engineer, you will bridge strategic architecture and operational delivery. You will take ownership of detection telemetry, SaaS configuration drift, and asset-control gap verification, while providing high-touch escalation support and technical guidance to associate and mid-level engineers.

**Key Responsibilities:**

- Partner with Principal engineers to support endpoint least-privilege policies, publisher allow-listing controls, and application governance workflows across macOS and Windows fleets.

- Develop engineering oversight, sensor health monitoring, and detection tuning across our enterprise EDR estate.

- Support the operational posture and policy configuration baseline across our SSPM environment.

- Drive asset governance, device coverage validation, and security control gap identification through Cyber Asset Attack Surface Management (CAASM).

- Implement and maintain runtime guardrails and least-privilege boundaries for developer AI tools, coding assistants, and open-source dependencies.

- Use agentic evaluation pipelines and automation workflows to streamline intake triage, exception processing, and routine telemetry reviews.

- Collaborate closely with and mentor associate and mid-level engineers, sharing best practices around script automation, detection engineering, and incident triage.

**Basic Qualifications**

- 7+ years of hands-on cybersecurity engineering experience in enterprise environments, with demonstrated success operating at a senior technical level

- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related discipline

- At least one recognized credential such as CISSP, a GIAC certification (e.g., GSEC, GCED, GCIA, GCIH, or GDSA), CompTIA Security+, or an equivalent vendor-recognized credential

- Hands-on experience engineering, administering, or deploying enterprise tooling across at least two of the following domains: Endpoint Detection & Response (EDR), SaaS Security Posture Management (SSPM), Cyber Asset Attack Surface Management (CAASM), or Endpoint Privilege Management (EPM) / Application Control

- Working knowledge of macOS and Windows operating system internals, execution controls, and enterprise scripting proficiency (Python, PowerShell, Bash, or Go) with REST API experience

- Clear written and verbal communication skills, with the ability to translate complex security telemetry into actionable guidance for cross-functional partners

**Other Qualifications**

- Experienced in attack surface analysis, with the ability to understand system architecture, identify potential entry points, and assess the impact of different types of threats to reduce overall organizational vulnerability

- Skilled in security engineering practices, including designing and implementing systems, protocols, and procedures that protect information and data from unauthorized access or damage.

- Proficient with security platforms, including configuring, operating, and managing security software, hardware, and services across an enterprise environment.

- Knowledgeable in threat and vulnerability management, with a proactive approach to identifying, assessing, and mitigating potential risks and weaknesses in security infrastructure.

- Experienced in security operations, including the identification, analysis, and mitigation of threats to enterprise information assets.

- Proficient in one or more programming languages with the ability to design, write, test, and debug code for automation, process improvement, and API integration across security tooling

- Ability to manage multiple projects and priorities while maintaining operational responsibilities, and a genuine interest in mentoring and developing fellow engineers

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Endpoint Detection & Response (EDR)
- SaaS Security Posture Management (SSPM)
- Cyber Asset Attack Surface Management (CAASM)
- Endpoint Privilege Management (EPM)
- macOS
- Windows
- Python
- PowerShell
- Bash
- Go
- REST API
- CISSP
- GIAC certification
- CompTIA Security+

### Nice to have
- attack surface analysis
- security engineering practices
- threat and vulnerability management
- security operations
- programming languages

---

Source: [Apply at workday.wd5.myworkdayjobs.com](https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USA-GA-Atlanta/Senior-Cybersecurity-Engineer---Enterprise-Security-Engineering_JR-0111221?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)