Principal Active Defense Engineer

Workday is seeking a Principal Active Defense Engineer to lead threat detection strategies and set technical direction for the security team. This hands-on role involves architecting detection methodologies, building and operating security capabilities at scale, and mentoring other engineers. You will drive initiatives from concept to production, focusing on detections-as-code, AI-assisted analysis, and ensuring high-quality alerts for incident response.

• Set technical direction for threat detection and platform architecture
• Lead complex, multi-system security initiatives from concept to production
• Build and advance the detections-as-code lifecycle and CI/CD tooling
• Mentor engineers through design and code reviews to raise technical ceiling
• Determine application of AI, automation, and generative tooling in detection
• Represent detection engineering across Workday and partner with other security teams