Senior CyberSecurity Engineer – Security Governance Automation

Job Description

Sr Cybersecurity Engineer | Workday

The Tone:
This is a full-time hybrid role at Workday, located in Dublin, Ireland. Workday is a Fortune 500 company and a leading AI platform for managing people, money, and agents, dedicated to shaping the future of work. This role is pivotal in building and sustaining trust in Workday’s cybersecurity commitments, protecting the data of Workmates and over 8000 customers by embedding a cybersecurity-first mindset and enabling business growth. You will contribute to shaping the future of security while collaborating with curious and courageous Workmates.

The TL;DR
• Role: Full Time
• Type: Full Time
• Location: Hybrid – Dublin, Ireland
• Pay: €84,000 EUR – €126,000 EUR yearly
• Team: Workday Cybersecurity Governance, Risk, Compliance & Trust team
• Mission: Define and drive the strategic direction and implementation of security controls to industrialize compliance and security processes across the organization.
• Tech Stack: AWS, GCP, Azure, Python, Go, Bash, Ruby, Terraform, CloudFormation

What You’ll Actually Do
• Championing Automation: Champion the principle of translating security policies directly into testable, automated code to ensure non-bypassable compliance.
• Strategic Roadmap: Design and execute the roadmap for industrializing and automating security governance, compliance verification, and control enforcement across the organization.
• DevSecOps Adoption: Drive the adoption of DevSecOps principles by embedding security controls directly into the CI/CD pipeline.
• Module Contribution: Contribute secure, reusable modules (e.g., secure Terraform/CloudFormation modules) for engineering teams.
• Technical Leadership: Lead complex projects, mentor junior staff, and significantly influence security governance decisions.

The Must-Haves
• Background: 7+ years of progressive, hands-on experience in engineering with a strong emphasis on security architecture, leading complex security initiatives, and developing advanced security solutions, including 2+ years focused on security governance/compliance.
• Experience: Extensive hands-on experience architecting, implementing, and securing infrastructure and services within major cloud service providers (AWS, GCP, Azure) at scale; proven experience in architecting, implementing, and evangelizing secure Infrastructure as Code (IaC) practices and automation at scale using tools like Terraform and CloudFormation.
• Skills: Strong proficiency in at least one scripting language (Python, Go, Bash, Ruby) for automation; expert-level understanding and practical application of cloud security concepts, principles, architectures, and technologies; deep, expert-level understanding of network, application, and platform security, including advanced threat landscapes, attack vectors, and mitigation techniques; exceptional communication, presentation, and interpersonal skills with the ability to influence senior leadership and diverse engineering teams.
• Bonus: Relevant industry certifications (e.g., AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS)) or equivalent focused training; proven experience implementing, auditing, and maintaining controls for major compliance frameworks (NIST CSF, ISO 27001).