Senior Cybersecurity Incident Response Leader - Hybrid

Workday, Inc.; Pleasanton (CA); Hybrid; USD 216,000 - 324,000; Full time

Job summary

Workday, Inc. in Pleasanton, CA, seeks a senior technical leader to own and mature a global security incident response program. You will drive advanced incident response, threat hunting, digital forensics, and security automation across multi-cloud environments, building scalable, AI-enabled security capabilities.

You’ll lead and develop a high-performing team of cybersecurity engineers, collaborating with risk, legal, and product leaders to reduce risk while enabling business growth.

Qualifications

• Strong leadership presence with ability to set direction and motivate teams.
• Deep expertise in security incident response with major security events.
• Experience improving security operations through automation and orchestration.

Responsibilities

• Oversee day-to-day security operations within the Security Incident Response team.
• Lead, coach, and develop a team of cybersecurity engineers, including performance management, career development, and mentoring.
• Set clear goals, priorities, and KPIs for the team aligned to the security and business strategy.
• Foster a culture of accountability, collaboration, and continuous improvement.
• Track and report security metrics, risk indicators, and program maturity to senior leadership.
• Champion the security mindset across every aspect of the company.
• Advise senior leadership in cybersecurity matters.
• Contribute to the program vision and implementation of a world class Response program at Workday.
• Architect and evolve a Response platform that enables Cyber Defense to operate with precision, automation and innovation.
• Build automation solutions around open-source and proprietary tools.
• Evaluate new tools and techniques to create innovative and practical security solutions.
• Partner with risk, legal, and compliance teams to identify, assess, and manage security risks for new and existing initiatives.
• Prioritize and drive remediation of security findings across infrastructure, applications, and processes.
• Lead or coordinate response to security incidents, including triage, containment, investigation, and post-incident reviews.

Skills

Technical leadership

Incident response

Security automation

Cloud security

Security operations

Education

Bachelor's degree

Job description

Workday, Inc. in Pleasanton, CA, seeks a senior technical leader to own and mature a global security incident response program. You will drive advanced incident response, threat hunting, digital forensics, and security automation across multi-cloud environments, building scalable, AI-enabled security capabilities.

You’ll lead and develop a high-performing team of cybersecurity engineers, collaborating with risk, legal, and product leaders to reduce risk while enabling business growth.