Security Engineer

• Use your deep technology and security expertise to lead strategic conversations and demonstrate the value of Workday’s platform.
• Translate complex technical and risk concepts into clear business outcomes for both technical and non-technical stakeholders across healthcare, higher education, and state and local government organizations.
• Lead discussions on Workday’s SaaS architecture with a particular emphasis on security, cybersecurity controls, identity and access management, data protection, disaster recovery and business continuity, and data privacy and compliance (including HIPAA and the protection of PHI/PII).
• Articulate how Workday’s integration frameworks, analytics, and AI/ML capabilities support secure, compliant, and resilient operations.
• Deliver high-impact presentations that show how Workday’s architecture and delivery model help customers strengthen their security posture, reduce risk, and achieve better business outcomes.
• Build trusted relationships with CIOs, CISOs, security and compliance leaders, enterprise architects, and business executives.
• Mentor others by sharing best practices and repeatable patterns from your customer engagements.
• Provide expert guidance to sales and deal teams on how to differentiate with Workday technology from a security, resiliency, and compliance perspective, including alignment to relevant industry standards and frameworks.

Senior/Principal Enterprise Architect – Security

• Provide technical and programmatic Information Assurance (IA) services and perform independent risk assessments in support of network and information security systems
• Lead and facilitate meetings, briefings, and cross-functional discussions with technical and non-technical stakeholders to communicate security risks, vulnerabilities, assessment results, and remediation progress
• Prepare cybersecurity documentation using accepted DoD guidelines and frameworks, such as RMF and related certification/authorization processes
• Review Security Assessment Plans (SAP)
• Provide Assessment and Authorization (A&A) support, including observing tests, analyzing actual test results, and making recommendations for improvement

Cybersecurity Validator

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Lead technical discovery sessions to understand customer business drivers, networking environments, and security requirements
• Design and articulate scalable SASE and Zero Trust architectures incorporating secure SD‑WAN, SSE, identity‑based access, and firewall technologies
• Deliver high‑impact product demonstrations, workshops, and proof‑of‑concepts showcasing HPE Aruba Networking SASE, including SD‑WAN, ZTNA, SWG, CASB, and DEM use cases
• Position and integrate solutions across the broader HPE + Juniper networking and security portfolio, including next‑generation firewalls and data‑center‑to‑cloud security designs
• Support sales pursuits by responding to RFPs, RFIs, and security questionnaires with clear, technically accurate documentation and diagrams
• Collaborate closely with account managers, specialist peers, partners, and services teams to drive successful deal outcomes
• Present confidently to both technical audiences and executive stakeholders, including security leaders and architects
• Provide field feedback to product management and engineering teams to influence roadmap and solution enhancements
• Travel across the Eastern U.S. to support customer meetings, partner engagements, workshops, and industry events

SASE & Security Presales Specialist

• Use deep technology and security expertise to lead strategic conversations
• Deliver high-impact presentations demonstrating Workday’s platform value
• Build trusted relationships with CIOs, CISOs, security leaders, enterprise architects, and business executives
• Mentor others by sharing best practices and feedback

Senior Enterprise Architect, Security

• Lead enterprise-wide vulnerability remediation efforts and execute risk-based strategies using CVSS, exploitability, asset criticality, and business impact
• Drive cross-functional collaboration with security, engineering, cloud, and infrastructure teams to ensure effective and timely remediation outcomes
• Oversee remediation lifecycle management, ensuring vulnerabilities are prioritized, tracked, and resolved within defined SLAs
• Establish and enforce prioritization models, including exception handling, risk acceptance, and escalation of high-risk issues
• Deliver executive reporting on exposure trends, remediation performance, and overall risk posture
• Improve remediation processes, tooling, and automation to enhance efficiency and reduce false positives
• Ensure alignment with regulatory and compliance frameworks and support audits, risk assessments, and governance activities

Senior Manager – Information Security, Exposure Management

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Supports and implements security requirements within the organization’s business processes and system environments
• Prepare security documentation using accepted frameworks and guidelines, including RMF, Xacta, and related accreditation processes
• Lead and facilitate meetings, briefings, and cross-functional discussions with technical and non-technical stakeholders to communicate security status, risks, vulnerabilities, assessment results, and remediation progress, and to drive alignment and timely resolution of identified issues
• Develop and maintain Security Test and Evaluation (ST&E) plans, ensuring the implementation of Security Technical Implementation Guides (STIGs), and Plan of Action and Milestones (POA&Ms)
• Provide certification and accreditation support, including developing, updating and maintaining security plans (SPs) and contingency plans
• Conduct complex risk assessments and vulnerability assessments and recommend mitigation strategies
• Analyze policies, procedures, and system implementations against applicable federal laws, regulations, and security standards; identify gaps and recommend corrective actions
• Recommend system enhancements and corrective actions to address security deficiencies
• Oversee secure configuration practices, guides implementation and validation of security tools, reviews compliance scan results, advise stakeholders on remediation priorities, and evaluates products and administrative practices for security impact and enterprise suitability
• Conduct security program audits and develop remediation strategies to reduce identified risks
• Perform vulnerability assessments and track remediation through resolution
• Develop strategies to support compliance with privacy, risk management, and e-authentication requirements
• Provide information assurance support for the development and implementation of security architectures to address new and evolving requirements
• Evaluate, develop, and enhance security policies, requirements, and tools
• Support computer security incident investigations and response activities

Information Systems Security Officer – Staff

• own global QMS processes for Warehousing & Distribution (W&D) and Supply Chain Security (SCS), ensuring standardization and consistency across the network.
• Define, maintain, and continuously improve global QMS processes for W&D and SCS, including standards, process flows, and documentation.
• Assess and implement changes to processes to meet evolving regulatory, compliance, and business requirements.
• Establish and manage process governance, including metric frameworks, performance tracking, and reporting.
• Monitor process performance, analyze trends, and identify risks or gaps requiring corrective or preventive actions.
• Lead and execute CI and OE initiatives across the GSC network.
• Own and manage business systems supporting QMS processes (e.g., lane management, distribution complaints), including enhancements and lifecycle oversight.
• Manage supplier-related processes for distribution materials to ensure quality, compliance, and performance standards are met.
• Lead cross-functional collaboration to align processes and improve E2E performance.
• Plan and support audits and MRs, ensuring processes meet quality expectations.
• Drive change management activities related to process and system updates, ensuring adoption across regions and functions.

Global Process Owner – Warehousing, Distribution & Supply Chain Security

• Monitor and manage serialization exceptions using TraceLink SCWM platform, ensuring timely investigation and resolution; Troubleshoot CVS Health’s traceability and verification issues, escalating to trading partners
• Support the implementation of SOPs and compliance workflows for exception handling and traceability; Maintain and update knowledge management records, ensuring compliance documentation aligns with CVS Health’s policies and regulatory standards
• Act as a liaison between CVS Health’s internal teams and external trading partners (manufacturers, wholesalers), addressing quarantine inventory issues and exception resolutions
• Assist in training CVS Health teams (Retail pharmacies and distribution centers, PBM Mail, PBM Specialty, etc.) on serialization compliance, exception management, and best practices
• Support the development of systems and processes needed for on-going exceptions management. Stay up to date with DSCSA compliance milestones, providing input for process improvements and regulatory updates

Senior Analyst – DSCSA Product Flow

• Lead onboarding and migration of applications onto Akamai CDN and WAF platforms.
• Configure, maintain, and support Akamai edge security and content delivery services.
• Implement and tune WAF policies, security controls, caching rules, and traffic management configurations.
• Work closely with application, network, cloud, and security teams to ensure secure and optimized application delivery.
• Troubleshoot complex Layer 1–7 issues involving DNS, TLS/SSL, HTTP/HTTPS, CDN behavior, caching, and origin connectivity.
• Support production incidents, root cause analysis, and operational escalations.
• Participate in on-call rotation and support maintenance activities during off-hour change windows.
• Develop technical documentation, runbooks, operational procedures, and audit artifacts.
• Collaborate with vendors and internal stakeholders on application onboarding and security initiatives.
• Support security assessments, audits, remediation activities, and compliance requirements.
• Provide technical guidance and mentoring to engineering teams.

WAF/CDN Security Architect

• Maintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime tooling.
• Automate detections throughout our tooling stack leveraged to uncover security events and attacks against our systems.
• Implement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities.
• Perform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
• Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
• Participate in incident response activities, including investigation, containment, and recovery efforts

Security Engineer II

• Own a meaningful slice of our defensive infrastructure end-to-end.
• Design, execute, and follow through on security awareness programs and phishing simulations.
• Participate in Endpoint Detection & Response rollout and ongoing operations.
• Revamp our network protections for Zero Trust network access and DNS security.
• Manage and operate our EASM platform, including continuous monitoring, finding triage, and remediation coordination.
• Coordinate with our third-party penetration testing partner for scoping, logistics, findings review, and remediation tracking.
• Monitor and respond to security alerts across our stack — SIEM, EDR telemetry, and related tooling.
• Own relevant SOC 2 controls and participate in vendor evaluations, new tooling assessments, and ad hoc projects.

• oversee and enhance the efficiency of our software development and deployment processes
• ensuring seamless integration and continuous delivery
• embed security into the SDLC, enabling secure-by-design applications, and scaling AppSec practices across engineering teams
• collaborate closely with internal software developers, IT professionals, and other stakeholders to streamline workflows
• automate processes, and implement best practices in configuration management, infrastructure as code, and monitoring
• manage resources, setting strategic goals, and driving innovation to support scalable and secure software solutions
• Design, develop, and maintain secure application components, frameworks, and tooling (SAST, DAST, custom scanners, CI/CD integrations)
• Perform threat modeling, architecture reviews, and secure design guidance for web, API, cloud, and microservice-based systems
• Identify, triage, and remediate vulnerabilities through code reviews, automated testing, and manual analysis
• Partner with all development teams to embed security controls into CI/CD pipelines and development workflows
• Establish and promote secure coding standards and best practices aligned with OWASP Top 10 and modern AppSec frameworks
• Lead vulnerability remediation guidance and contribute directly to fixing security issues in core codebases
• Support incident response activities, including application-level root cause analysis and corrective actions
• Elevate developer security awareness through coaching, documentation, and internal security evangelism
• Train and mentor application developers in security and design principles
• Working closely with the Application Development Manager on project resourcing and utilization
• Develop and maintain documentation and testing methodologies for secure coding standards
• Manage and maintain the infrastructure required for development and production environments, ensuring scalability, reliability, and security
• Collaborate with IT and other departments to align infrastructure needs with organizational goals
• Serve as a liaison between development, operations, and other departments to ensure alignment and effective communication
• Ensure that security best practices are integrated into the development and deployment processes
• Stay updated with the latest trends and technologies in DevOps and software development
• Drive continuous improvement initiatives to enhance the DevOps security culture and best practices within the organization
• Participate in code reviews to represent reviewed work for adherence to standards and specifications
• Other duties as assigned.

Senior Security Application Developer

• Own and execute Slingshot’s cybersecurity strategy across enterprise, product, and operational environments.
• Lead readiness and implementation for CMMC, NIST SP 800-171, DFARS, and related government cybersecurity requirements.
• Establish and scale secure software development lifecycle (SDLC), application security, and DevSecOps practices.
• Design and oversee cloud security architecture across AWS/Azure/GovCloud environments.
• Drive audit readiness, including System Security Plans (SSPs), POA&Ms, and continuous monitoring programs.
• Partner with Product and Engineering to embed security into development without slowing delivery velocity. Build and operate security monitoring, detection, vulnerability management, and incident response capabilities.
• Lead executive-level incident response, including customer communication and regulatory reporting.
• Develop and enforce identity, access management, data protection, and logging strategies across systems.
• Oversee third-party/vendor risk management and supply chain security, including flowdown requirements.
• Partner with the Facility Security Officer (FSO) on classified programs, insider threat initiatives, and industrial security requirements.
• Ensure secure handling of CUI/FCI and readiness for customer audits and security questionnaires.
• Define and communicate cyber risk to executive leadership, board members, and customers.
• Support business development by enabling compliance required to win and execute government contracts.
• Build and scale a lean, high-performing security team aligned to company growth.

Chief Information Security Officer (CISO)

• Executes audit strategy for the sound application of risk-based auditing by defining audit scope and audit program, and leverages automation and innovative methods in a timely and high quality manner
• Identifies control deficiencies, discusses with line management, and initiates control matter recommendations
• Establishes business partner relationships, primarily with line management, to develop business knowledge
• Assesses impacts to business processes, controls, and strategies to provide recommendations on severity ratings
• Exercises sound judgment to effectively influence management to improve the control environment while developing knowledge of product, business, and technical expertise
• Develops skills to use innovative tools to complete audit activities more efficiently (e.g., testing)

Senior Auditor – Information Security, Cyber Audit

• Perform vulnerability scans on undersea combat platforms and their support networks.
• Perform security analyses of operational & developmental environments, threats, vulnerabilities, & internal interfaces.
• Develop, implement, and test mitigations and countermeasures to protect our submarine fleet from real-world cyber threats.
• Plan, implement, upgrade, & monitor security measures.
• Provide timely detection, identification, & alert of possible attacks/intrusions, anomalous activities, & misuse activities & distinguish these from benign activities.
• Operate Security Information & Event Management (SIEM) technology; collect & analyze log & event data; & detect, alert, & report on potential security threats or incidents.
• Apply cyber threat intelligence to address malware threats, phishing campaigns, & APTs.
• Use cyber defense tools & collect data to analyze events & mitigate threats.
• Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, & effects on system & information.

Cybersecurity Intern – SkillBridge

• Identify business-critical risks present within Instacart’s product and infrastructure.
• Analyze the risks and define remediation strategies with actionable roadmaps.
• Develop scalable systems to enable and encourage secure engineering patterns.
• Own and drive systemic improvements across engineering and other functions.
• Coach and mentor other engineers within the organization.

Senior Security Engineer – Cloud, AI, Product Security

• Independently manage and resolve DSCSA serialization and traceability exceptions impacting Mail and Specialty product flow, including quarantined inventory.
• Perform advanced investigation across SAP, TraceLink SCWM, and related systems to analyze purchase orders, receipts, inventory movements, scan data, and EPCIS transactions.
• Reconcile discrepancies across multiple systems and data sources, identifying root causes and implementing corrective actions.
• Investigate and resolve cross-system timing or data mismatches that result in receiving or compliance failures.
• Ensure all exception handling aligns with DSCSA requirements, internal SOPs, and audit standards
• Document investigations, actions taken, and outcomes in a clear, consistent, audit-ready manner.
• Serve as a point of escalation for complex, high-risk, or recurring exceptions, providing guidance to analysts and operational partners.
• Partner with IT, Compliance, Operations, and external trading partners to resolve systemic issues and support long-term fixes.
• Identify trends and recurring issues, contributing to process improvements, training materials, and preventive controls.
• Support enterprise readiness by maintaining strong awareness of DSCSA milestones, regulatory guidance, and system changes.

Senior Analyst – DSCSA Exception Management, SAP Specialist

• Team Leadership & Development: Mentoring, and growing security engineers. This includes running 1:1s, career development planning, performance reviews, and building a culture of continuous learning around evolving threats and technologies.
• Security Execution: Partnering with engineers on your team and the Sr. Director of Security and Integrity you’ll define and prioritize the team's quarterly and annual security initiatives, aligning them with business objectives and frameworks like NIST CSF, CIS Controls, or SOC 2. Translating risk assessments into actionable engineering work.
• Cross-Functional Collaboration: Partnering with Platform, SRE, Legal, IT, Compliance, and Product teams to embed security into the SDLC, incident response processes, and vendor management workflows.
• Incident Response & Preparedness: You’ll help the team to maintain the Security incident response program: runbooks, running tabletop exercises, on call schedules, and ensuring timely response to alerts and events.
• Product and Cloud Security: Drive product security practices and cloud security posture across our AWS infrastructure, ensuring secure architecture, configuration, and continuous monitoring of our production environments.
• Vulnerability & Risk Management: Overseeing application security testing (SAST, DAST, SCA), penetration testing programs (including bug bounty), and ensuring vulnerabilities are triaged, prioritized, and remediated within SLA.
• Corporate Security: Partnering with IT, you and the team will help ensure strong protections in corporate security including spam, EDR, and device security is mature and well executed.
• Vendor & Third-Party Risk: Helping the team evaluating security vendors, and overseeing third-party risk assessments.
• Budget & Resource Planning: In coordination with the other department managers; manage the security budget, justifying tooling spend, headcount requests.

See all jobs on JobTailor