Security Software Engineer on Evisort Security team at Workday. Designing security products and managing vulnerability lifecycles through the software development process.
Responsibilities
Design and build security products that empower the entire Workday AI organization
Integrate security at every stage of the software development lifecycle (SDLC) and deployment pipelines
Partner with engineering and platform teams to implement security-by-design and shift-left security practices
Patch vulnerable dependencies
Manage the end-to-end vulnerability management lifecycle, including discovery, assessment, prioritization, remediation, and reporting.
Requirements
5+ years of experience in software engineering focused on security or building security applications
3+ years experience with Python and Python web development framework (FastAPI, Flask, Or Django)
3+ years experience with cloud platforms (e.g., AWS, GCP) and containerization technologies (e.g., Docker, Kubernetes)
Familiarity with AI security concepts
Experience with building AI
Proficiency in security tools (e.g., Snyk, Semgrep, Contrast, Wiz)
Familiarity with infrastructure as code (IaC) tools (e.g., Terraform, Cloudformation, Ansible)
Full-stack generalist
Proficient in database systems (Postgres, DynamoDB, Redis, Pinecone)
Strong understanding and practical application of modern software development practices, working with DevOps, automated testing, and observability
Understanding of network and application security threats, attack techniques, and mitigation options
Experience with incident response
BS or MS degree in Computer Science, Engineering, or equivalent job experience.
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.