largest organizations adapt to what?s next by bringing finance, HR,
and planning into a single enterprise cloud. We work hard, and we?re
serious about what we do. But we like to have fun, too. We put people
first, celebrate diversity, drive innovation, and do good in the
communities where we live and work.
JOB DESCRIPTION
_YOU WILL_ be a senior member of the Platform and Infrastructure
Security team, which is responsible for identifying security risks and
ensuring mitigation across all Workday products. As a Senior
Information Security Engineer, you will work closely with development
and operations teams to ensure security is built into the
infrastructure that runs the Workday product.
_YOU WILL_ contribute to security standards and implement technical
controls in support of the platforms and infrastructure used in
Workday. Deliver security services, tools, and automations to enable
detection and enforcement of security controls across the various
platforms in Workday?s production networks. As a senior member of
Workday?s Security Engineering organization, you will be responsible
for driving a ?Paved Road? approach to security, where teams are
given all the resources they need to make good security decisions, and
to deploy software quickly and safely.
The most valuable contributions you will make are those that address
common security issues systematically, and at scale through
frameworks, tooling and automation. Ideally, you have a proven
infrastructure engineering background and can communicate with
engineering teams as a confident and empathetic subject matter expert.
_RESPONSIBILITIES_ Consult with infrastructure, service owners and
operations teams to provide guidance and recommend infrastructure
security design solutions;
Perform security assessments on new and existing products and services
to identify security risks and establish baseline security
requirements;
Contribute to security standards across Workday to improve security
and resiliency of software and systems architecture;
Proactively build relationships across with technical peers across the
teams;
Contribute to security projects from inception through completion,
working closely with engineering, product, and program management
Responsible for implementing security systems and tooling in areas
such as container and kubernetes security, network security, runtime
compute security;
Identify security risks to information security;
Mentor and coach junior members the security engineering team;
Stay ahead of the industry technology and business trends; actively
contribute to product, technology and engineering process innovation
to help us lead the market.
_REQUIREMENTS_ 7+ years of progressively responsible experience in the
area of security tools development or infrastructure security
hardening. Most recent roles should reflect direct, hands-on
experience with infrastructure security;
Demonstrated technical expertise in one or more of the following
areas:
Linux OS hardening Kubernetes hardening virtualization platforms such
as Openstack and Vmware; securing AWS, Azure, or GCP infrastructure;
securing CI/CD pipelines;
_EXPERIENCE WITH_ Hashicorp Vault, Consul and Terraform a plus;
Proven experience participating in security reviews for complex
compute infrastructure, including distributed systems deployed on
virtualization platforms services deployed to cloud, on-premise, and
hybrid environments; knowledge and implementation experience across
information security disciplines, including web application, network,
and operating systems security Relevant
development/scripting/automation experience in at least one of Python
Ruby Go Understanding of common application and network protocols,
cryptographic technologies, and authentication and authorization
protocols;
Direct experience supporting cloud operational models, including SaaS
security architecture, microservices, containers, and Kubernetes;
Preferred
_QUALIFICATIONS_ Contributions to the security community research
papers, public CVEs, conference talks, open source, etc. Familiarity
with distributed systems technology and microservices
_ABILITY TO_ drive efforts as a SME thinking in whole systems, working
within and between teams to have a positive security impact Knowledge
of compliance requirements for industry-standard certifications like
PCI DSS, SOC2, HIPAA, FedRAMP Workday is an Equal Opportunity Employer
including individuals with disabilities and protected veterans. Do what you love. Love what you do. At Workday, we help the world?s
largest organizations adapt to what?s next by bringing finance, HR,
and planning into a single enterprise cloud. We work hard, and we?re
serious about what we do. But we like to have fun, too. We put people
first, celebrate diversity, drive innovation, and do good in the
communities where we live and work.
JOB DESCRIPTION
_YOU WILL_ be a senior member of the Platform and Infrastructure
Security team, which is responsible for identifying security risks and
ensuring mitigation across all Workday products. As a Senior
Information Security Engineer, you will work closely with development
and operations teams to ensure security is built into the
infrastructure that runs the Workday product.
_YOU WILL_ contribute to security standards and implement technical
controls in support of the platforms and infrastructure used in
Workday. Deliver security services, tools, and automations to enable
detection and enforcement of security controls across the various
platforms in Workday?s production networks. As a senior member of
Workday?s Security Engineering organization, you will be responsible
for driving a ?Paved Road? approach to security, where teams are
given all the resources they need to make good security decisions, and
to deploy software quickly and safely.
The most valuable contributions you will make are those that address
common security issues systematically, and at scale through
frameworks, tooling and automation. Ideally, you have a proven
infrastructure engineering background and can communicate with
engineering teams as a confident and empathetic subject matter expert.
_RESPONSIBILITIES_ Consult with infrastructure, service owners and
operations teams to provide guidance and recommend infrastructure
security design solutions;
Perform security assessments on new and existing products and services
to identify security risks and establish baseline security
requirements;
Contribute to security standards across Workday to improve security
and resiliency of software and systems architecture;
Proactively build relationships across with technical peers across the
teams;
Contribute to security projects from inception through completion,
working closely with engineering, product, and program management
Responsible for implementing security systems and tooling in areas
such as container and kubernetes security, network security, runtime
compute security;
Identify security risks to information security;
Mentor and coach junior members the security engineering team;
Stay ahead of the industry technology and business trends; actively
contribute to product, technology and engineering process innovation
to help us lead the market.
_REQUIREMENTS_ 7+ years of progressively responsible experience in the
area of security tools development or infrastructure security
hardening. Most recent roles should reflect direct, hands-on
experience with infrastructure security;
Demonstrated technical expertise in one or more of the following
areas:
Linux OS hardening Kubernetes hardening virtualization platforms such
as Openstack and Vmware; securing AWS, Azure, or GCP infrastructure;
securing CI/CD pipelines;
_EXPERIENCE WITH_ Hashicorp Vault, Consul and Terraform a plus;
Proven experience participating in security reviews for complex
compute infrastructure, including distributed systems deployed on
virtualization platforms services deployed to cloud, on-premise, and
hybrid environments; knowledge and implementation experience across
information security disciplines, including web application, network,
and operating systems security Relevant
development/scripting/automation experience in at least one of Python
Ruby Go Understanding of common application and network protocols,
cryptographic technologies, and authentication and authorization
protocols;
Direct experience supporting cloud operational models, including SaaS
security architecture, microservices, containers, and Kubernetes;
Preferred
_QUALIFICATIONS_ Contributions to the security community research
papers, public CVEs, conference talks, open source, etc. Familiarity
with distributed systems technology and microservices
_ABILITY TO_ drive efforts as a SME thinking in whole systems, working
within and between teams to have a positive security impact Knowledge
of compliance requirements for industry-standard certifications like
PCI DSS, SOC2, HIPAA, FedRAMP Workday is an Equal Opportunity Employer
including individuals with disabilities and protected veterans.
We need : English (Good)
Type: Permanent
Payment:
Category: Others
