Workday is seeking a Cybersecurity Engineer for its Security Automation & Integration Engineering (SecAIE) team in Reston, VA (onsite). In this role, you will provide primary ownership of the agent, eval, and application layer that powers Workday’s Active Defense charter. The goal is to help security teams inspect and act on results using shared, reliable security data, turning manual workflows into scalable, decision-accelerating automation.
What you’ll do
- Own agent-adjacent application work, including eval harnesses, agent scaffolds, and the internal UIs that security partners use to inspect and act on results.
- Design and evolve schemas and data contracts so agents and humans work from the same objects rather than one-off payloads.
- Turn partner requests into shipped outcomes: scope the problem, propose approaches, select one, and drive execution through design, review, rollout, and operational readiness (eval, tracing, runbooks).
- Build and maintain integrations across security tools and enterprise platforms, including SOAR, SIEM, vulnerability scanners, and ticketing, when the application or agent needs them.
- Raise the team’s AI-augmented engineering floor through shared skills, reusable scaffolds, a review discipline for AI-generated code, and eval approaches that detect drift.
- Iterate quickly: prototype, test, ship, learn, and improve while improving the team’s execution cadence.
What you bring
- Strong Python skills and hands-on experience shipping production software, including APIs, services, batch jobs, or application backends, with code review, testing, and operational follow-through.
- Experience with LLM / agent systems (harnesses, eval, tracing, or agentic pipelines) or strong software-engineering fundamentals plus demonstrated AI-augmented development (Copilot, coding agents) and a point of view on where it helps.
- Comfort working with real data when designing or evolving schemas/data contracts and application UIs, not mock-only prototypes.
- Working knowledge of core cybersecurity practices such as identity and access, secrets handling, secure-by-default configuration, and reasoning over security data including vulnerabilities, incidents, identity, and threat intel.
- Ability to own what you ship, including runbooks, basic observability, and eval that continues to run after changes merge.
Technologies you’ll work with
Python, LLM / agent systems, LangChain, LangGraph, LangSmith, LLM-as-judge, offline eval, tracing, observability, React, SIEM, SOAR, vulnerability scanners, Copilot, coding agents, AWS, Terraform, Docker, and Tines.
About the team
Security Automation & Integration Engineering (SecAIE) builds intelligent automation that turns manual cybersecurity processes into scalable systems. As the engineering excellence partner within Cybersecurity and Trust, SecAIE provides a unified data foundation, intelligent automation, and decision support tools that enable security teams to make precise, data-driven decisions at machine speed.
SecAIE partners with Security Leadership, Operational Teams, Engineering Teams, and Governance/Risk Teams to deliver platforms that multiply effectiveness. The team is small, high-impact, and values curiosity, pragmatism, and collaboration.
Role details
Primary location: USA.VA.Reston (onsite). Base pay range: $117,800 - $210,000 USD (additional US location base pay range). Primary location base pay range: $130,200 - $195,400 USD.
Colorado consideration: If performed in Colorado, the pay range is $124,000 - $186,000 USD based on min and max pay range for that role if performed in CO.
Flexible work approach: With Flex Work, combine in-person time and remote. Spend at least half (50%) of your time each quarter in the office or in the field with customers, prospects, and partners (depending on role). Those in remote “home office” roles have the opportunity to come together in Workday offices for important moments.
Application deadline: 10/16/2026.
Accommodation: Workday provides reasonable accommodations during the application process. Please see the posting for details on how to request an accommodation as a qualified veteran, due to a disability, for religious reasons, or as otherwise provided under applicable law.
