Cybersecurity Engineer (Workday Security Incident Response Team)

Workday

RemoteMid-levelPosted Oct 23, 2026

Open to applicants in Ireland

Members get the apply link for this job and all 13,000+ others, with company names across the whole board.

From €11/month, billed €99 every 9 months.

Become a member

Already a member? Log in

Job description

In support of the phenomenal growth in the number of Workday customers and Workmates, we are growing our cybersecurity response program to continue to deliver world class capabilities. Our team is building the SIRT of the future to further our customer’s confidence in our platform
This means we are continually innovating our investigative capabilities in the areas of incident response, digital forensics (DFIR), threat hunting, and security automation. We respond quickly, efficiently and regain control by minimising the threat of damage caused by malicious activities
We are a highly visible global security function that collaborates closely with multiple Workday teams. We work hard and push each other to constantly improve, but in an environment that is fun and considered a great company to work for
Workday is looking for a passionate and experienced security professional. This is an opportunity to contribute to a highly visible team involved in all major cybersecurity events, where your skills and experience will be used to inspire confidence and trust in Workday
This is a highly technical role with the understanding that you are already conversant in incident response, security automation, system security, network security, and threat hunting
This role will push you to understand the inner workings of our SaaS platform and couple that with traditional security practices on premise. We have resources in every cloud, including our own. We offer a hybrid/flexible schedule for employees
Responding to operational queue work as part of a follow-the-sun model
Lead cyber security incident response and investigation efforts. This includes digital forensics and cloud security events
Improve threat detection capability by performing gap analyses and remediation
Identify where we need to apply additional controls, extra tooling, and automation to extend the coverage of the security monitoring and response capabilities
Build and maintain investigation and/or response tools and processes
Evaluate new tools and techniques to create innovative and practical security solutions- 3+ years of experience as a security engineer/analyst in related domains
Bachelor’s Degree or equivalent experience
Other relevant certification/s and training (e.g. Offensive Security, SANS, CISSP, specific security tooling, etc.)
Python or other scripting languages is essential, as is a strong understanding of Linux/OSX and Windows
Comfortable using AI tooling for workflow automation and investigative enhancements
Excellent verbal and written communication skills
Demonstrated knowledge of adversary TTPs (Tactics, Techniques and Procedures)
Deep understanding of network and application security threats, attack techniques, and mitigation options and network related protocols (e.g. TCP/IP, IPSEC, routing protocols, etc.)
Ability to drive multiple projects and priorities while managing operational responsibilities
Experience in incident response and incident management
Experience with cloud security concepts, solutions, and automation
Experience with threat hunting techniques
Experience with SIEM and SOAR security technologies and solutions
Experience in performing digital forensics and securely acquiring data from various sources

Cybersecurity Engineer (Workday Security Incident Response Team)

Job description

More like this