Security Software Engineer designing and building security products for the Workday AI organization, ensuring secure development practices across the software lifecycle.
Responsibilities
Design and build security products that empower the entire Workday AI organization.
Integrate security at every stage of the software development lifecycle (SDLC) and deployment pipelines.
Partner with engineering and platform teams to implement security-by-design and shift-left security practices.
Patch vulnerable dependencies.
Manage the end-to-end vulnerability management lifecycle, including discovery, assessment, prioritization, remediation, and reporting.
Requirements
5+ years of experience in software engineering focused on security or building security tools.
3+ years experience with Python and Python web development framework (FastAPI, Flask, Or Django).
3+ years experience with cloud platforms (e.g., AWS, GCP) and containerization technologies (e.g., Docker, Kubernetes).
Familiarity with AI security concepts.
Experience with building AI
Proficiency in security tools (e.g., Snyk, Semgrep, Contrast, Wiz).
Familiarity with infrastructure as code (IaC) tools (e.g., Terraform, Cloudformation, Ansible).
Full-stack generalist.
Proficient in database systems (Postgres, DynamoDB, Redis, Pinecone)
Strong understanding and practical application of modern software development practices, working with DevOps, automated testing, and observability.
Understanding of network and application security threats, attack techniques, and mitigation options.
Experience with incident response.
BS or MS degree in Computer Science, Engineering, or equivalent job experience.
Product Security Lead securing Miovision’s intelligent transportation products, cloud services, and connected devices. Leading secure - by - design engineering and product risk management for safer smart transportation networks.
Staff Product Security Engineer securing Phantom’s self - custodial multi - chain crypto wallet. Assessing vulnerabilities, leading security projects, and integrating protection across development and platform teams.
Cybersecurity co - op protecting TD’s banking technology, data, and fraud systems. Testing security solutions, operating tooling, and mitigating cyber and technology risks.
Security Advisor Specialist protecting Intact’s insurance business through enterprise CDN, WAF, and API security. Automating controls with Terraform and CI/CD while investigating threats and tuning defenses.
Senior IAM Cyber Security Specialist onboarding applications to RBC’s identity and access management solutions. Ensuring security compliance, risk reporting, and onboarding testing for a global bank.
Security advisor strengthening Desjardins's security posture across risk, compliance, data protection, and fraud prevention. Advising partners and coordinating security initiatives for the financial cooperative Desjardins.
Senior software developer evolving Genetec’s internal cloud security platform. Building event - driven detections and operating secure production systems with DevOps automation.