Cybersecurity Engineer (Workday Security Incident Response Team)

Join Workday, a leading provider of enterprise cloud applications for finance and human resources. As a Cybersecurity Engineer, you will be part of a highly visible global security function that collaborates closely with multiple teams. You will lead cyber security incident response and investigation efforts, improve threat detection capability, and build and maintain investigation and response tools and processes. This is a highly technical role that requires a strong understanding of incident response, security automation, system security, network security, and threat hunting.

• Lead cyber security incident response and investigation efforts, including digital forensics and cloud security events.
• Improve threat detection capability by performing gap analyses and remediation, and identify where additional controls are needed.
• Build and maintain investigation and/or response tools and processes, and evaluate new tools and techniques for innovative security solutions.

• 3+ years of experience as a security engineer/analyst in related domains
• Bachelor’s Degree or equivalent experience
• Other relevant certification/s and training (e.g. Offensive Security, SANS, CISSP, specific security tooling, etc.)
• Python or other scripting languages is essential, as is a strong understanding of Linux/OSX and Windows
• Comfortable using AI tooling for workflow automation and investigative enhancements
• Excellent verbal and written communication skills
• Demonstrated knowledge of adversary TTPs (Tactics, Techniques and Procedures)
• Deep understanding of network and application security threats, attack techniques, and mitigation options and network related protocols (e.g. TCP/IP, IPSEC, routing protocols, etc.)
• Ability to drive multiple projects and priorities while managing operational responsibilities
• Experience in incident response and incident management
• Experience with cloud security concepts, solutions, and automation
• Experience with threat hunting techniques
• Experience with SIEM and SOAR security technologies and solutions
• Experience in performing digital forensics and securely acquiring data from various sources