Sr. Principal Security Engineer

Your work days are brighter here.

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

About the Role

As a Senior Principal Cybersecurity Engineer, you'll be the connective tissue across Workday's security architecture. You'll partner closely with our Architecture & Consulting, Secure software development, and Infrastructure Security functions to build a unified, cross-domain view of how we secure our cloud, platform, and identity environments, with the latitude to set direction on some of our most complex, cross-cutting initiatives.

Responsibilities include:

• Act as the Directly Responsible Individual (DRI) for complex, high-impact security architecture initiatives, rapid-response efforts, and cross-team work addressing urgent platform and infrastructure needs.
• Bring deep technical expertise in modern identity systems, public cloud architecture, and platform engineering to close systemic security gaps across our environments.
• Partner with our Architecture & Consulting and Infrastructure Security teams to align cloud and platform patterns with operational tooling and security frameworks, so our defenses reinforce each other.
• Expand how we manage our attack surface, moving beyond fixing individual vulnerabilities toward an architectural view of risk across our cloud and infrastructure footprint.
• Identify and apply practical AI and automation to speed up our secure development, consulting, and attack-surface-discovery work.
• Mentor engineers across both architecture and infrastructure security teams, helping raise the technical bar across the organization.

About You

Basic Qualifications

• 12+ years of experience in cybersecurity engineering, security architecture, or a related technical discipline, including experience architecting secure software & services across cloud, platform, or infrastructure environments.

Other Qualifications

• Experience designing, developing, securing, and operating software, services, and platforms as one unified, code-to-cloud secure software development lifecycle (SSDLC) — treating application code and the underlying platform/infrastructure as a single continuous security surface, not separate disciplines, across requirements, design, build, deployment, and operations.
• Experience designing and implementing security architecture across public cloud environments (AWS, GCP, or similar), with the ability to translate that expertise into company-wide patterns and guardrails.
• Background in attack surface analysis and threat and vulnerability management, with a track record of shifting teams from reactive fixes toward a broader, risk-based view of exposure.
• Applied knowledge of security-by-design principles and security engineering, gained from building and scaling security tooling or platforms in a complex, fast-growing environment.
• Experience with modern identity architecture, and the ability to apply that depth to close gaps across cloud and platform environments.
• Comfort working with ambiguity: able to act as the directly responsible individual on complex initiatives, set direction, and bring multiple technical teams into alignment.
• Experience applying automation or AI to scale security operations, consulting workflows, or attack-surface discovery.
• Strong relationship-building skills, with a track record of working across teams to align technical roadmaps and influence how security gets built.

Workday Pay Transparency Statement (For EU Locations Only)

Listed below is the base salary range applicable to this position. Workday pay ranges (and the precise pay offered to the successful candidate) are based on a number of objective criteria such as relevant experience and skills, and educational qualifications, level of responsibility, demands of the role, work location and business need. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants awarded by Workday Inc. For more information regarding Workday’s comprehensive benefits, please click here.

Our Approach to Flexible Work
 

With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter.

Pursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records.

Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans.

Workday is committed to providing reasonable accommodations for qualified individuals during our application process, in order to perform one or more essential functions of their job, as well as regarding the use of AI tools for employment decision-making to any degree. Please see below for more details including how to request an accommodation as a qualified veteran, due to a disability or for religious reasons, or as otherwise provided under applicable law.

Workday prohibits taking adverse action against any candidate or employee for reporting a possible violation of this policy, requesting one or more work accommodations, exercising a privacy right, or cooperating in an investigation in accordance with applicable law. Any employee who retaliates against a candidate or employee for doing so may be subject to disciplinary action, up to and including termination of employment, to the fullest extent allowable under applicable law.

If you require a reasonable accommodation, you may email accommodations@workday.com, as far in advance as possible.

Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!

At Workday, we value our candidates’ privacy and data security.  Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. 

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.