Principal Cybersecurity Engineer – AI-Driven IR

Workday; Boulder (CO); Hybrid; USD 176,000 - 264,000; Full time

Job summary

Workday is seeking a dedicated security leader to drive incident response, security tooling, and AI-enabled security solutions. You will shape a world-class security response program, lead security incidents, mentor staff, and collaborate across teams to protect our SaaS platform in a hybrid environment.

The role requires deep expertise in incident response, threat hunting, forensics, and cloud-security practices, with a focus on accelerating automation and secure software development lifecycle.

Qualifications

• Over 10 years in cybersecurity or information security roles, including 2+ years of hands-on technical leadership.
• Experience with scripting languages and AI (conversational/Generative AI and AI Agents).
• Bachelor’s Degree required.

Responsibilities

• Set direction and drive the security mindset across the company.
• Architect and operate security tooling and environments (SOAR, SIEM, Incident Response, Forensics, Agentic AI).
• Contribute to the program vision for a world-class Response program at Workday.
• Evolve platforms enabling Cyber Defense with precision, automation, and innovation.
• Lead and support security incident response across the organization.
• Mentor new and existing staff to build team capability.

Skills

Security leadership

Incident response

AI in security

Scripting

Cloud security

Threat hunting

Forensics

SSDLC

SIEM/SOAR

Education

Bachelor’s Degree

Tools

SIEM

SOAR

Job description

Workday is seeking a dedicated security leader to drive incident response, security tooling, and AI-enabled security solutions. You will shape a world-class security response program, lead security incidents, mentor staff, and collaborate across teams to protect our SaaS platform in a hybrid environment.

The role requires deep expertise in incident response, threat hunting, forensics, and cloud-security practices, with a focus on accelerating automation and secure software development lifecycle.