About the Role

Do you have a passion for security? This is an excellent opportunity to collaborate with technology leaders across infrastructure, product and operations teams. In this role, you will split your time between standards development, tool development and infrastructure security assessments. Ideal candidates will have a shown passion for developing and driving security standards. Candidates for this role should have knowledge of compliance requirements for industry-standard certifications like PCI DSS, SOC2, HIPAA, FedRAMP.

What you will do:

• Consult with infrastructure, service owners and operations teams to provide guidance and recommend infrastructure security design solutions.
• Perform security assessments on new and existing products and services to identify security risks and establish baseline security requirements.
• Establish and drive security standards across Workday to improve security and resiliency of software and systems architecture.
• Proactively build relationships across with technical peers and leaders across the teams.
• Advocate for and lead complex security projects from inception through completion, working closely with engineering, product, and program management
• Responsible for designing and implementing security systems and tooling in areas such as container and Kubernetes security, network security, runtime compute security.
• Present security risks to information security leadership and influence product strategy and direction.
• Mentor and coach other members the security engineering team.
• Stay ahead of the industry technology and business trends; actively drive product, technology, and engineering process innovation to help us lead the market.

• 7+ years of progressively responsible experience in the area of security tools development or infrastructure security architecture and design
• Proven technical expertise with securing Linux OS.
• Experience with Kubernetes security hardening
• Experience securing infrastructure hosted on cloud service providers like GCP, AWS and Azure
• Experienced knowledge across information security subject areas, including web application, network, and operating systems security
• Development/scripting/automation experience is a requirement
• experience drafting and publishing technical standards and reference architecture documents

What we hope you have:

• Contributions to the security community research papers, public CVEs, conference talks, open source, etc.
• Familiarity with “big data” and distributed systems technology
• Understanding of common application and network protocols, cryptographic technologies, and authentication and authorisation protocols

• Career & Capability Growth
• Wellness Program
• Pension
• Health Insurance & Dental Plan
• Employee Assistance Program
• Tax Saver Scheme
• Stock Schemes
• 27 Days Annual Leave