Principal Cybersecurity Data Engineer, Workday
€104-156k
Enterprise AI platform for managing HR, finance & IT
Be an early applicant
Enterprise AI platform for managing HR, finance & IT
1001+ employees
Be an early applicant
€104-156k
1001+ employees
Company mission
To leverage the power of AI to elevate humans and supercharge work, moving business forever forward.
Role
Who you are
- You are a rare hybrid: a deeply experienced enterprise data engineer who understands the unique mandates of cybersecurity operations. You know that security telemetry requires strict data isolation, chain-of-custody, and ultra-low latency
- You thrive in ambiguous, transformative environments and are equally comfortable architecting high-level strategy as you are diving into the code to untangle complex data models
- You are a seasoned engineering leader who speaks both the language of scalable data architectures and the language of cyber defense. You have a builder’s mentality, a deep intolerance for technical debt, and a proven track record of designing data ecosystems that can handle the extreme scale and velocity of modern threat telemetry
- You aren't just looking to write pipelines; you are looking to architect a foundational platform, write the technical standards, and elevate the engineering maturity of the entire team
- You are a Dual-Domain Architect: You possess deep enterprise data engineering experience combined with a strong understanding of cybersecurity operations. You understand the nuances of security telemetry (EDR, network logs, threat intel) and the specific challenges of migrating away from legacy SIEMs like Splunk to a modernized architecture
- You are a Master of Modern Data Stacks: You have expert-level, hands-on experience designing and building cloud-native data lakehouses (e.g., Databricks, Snowflake, or native GCP/AWS data stacks). You know how to build semantic layers and optimize storage/compute for both real-time streaming and complex historical analytics
- You Code for Scale: You are highly proficient in programming languages used for data engineering (Python, SQL, Scala, or Go) and have deep experience with distributed data processing and orchestration tools (e.g., Apache Spark, Kafka, Airflow, dbt). Scaling ingestion to thousands of high-velocity sources is a technical challenge you have successfully navigated before
- You are Obsessed with Reliability: You know that in cybersecurity, bad data means missed threats. You have hands-on experience designing and implementing strict data observability, automated quality checks, and reliability frameworks from scratch. You treat data infrastructure like code, relying heavily on CI/CD pipelines and version control
- You are a Transformation Catalyst & Mentor: You thrive in modernization environments. You are highly capable of getting your hands on the keyboard to untangle complex engineering problems, but your true value lies in your ability to mentor engineers, instill modern software engineering practices, and guide the team through a massive technological and cultural shift
What the job involves
- We are a newly formed, forward-looking Cybersecurity Data Engineering & Platform Team driving the future of our enterprise defense strategy
- Our mission is to build a next-generation, centralized data lakehouse that unifies all security telemetry into a single, high-performance ecosystem
- Operating across two specialized verticals—Data Logistics (ingestion, enrichment, and semantic layers) and Data Platform (foundational infrastructure, security architecture, and AI enablement)—we are designing a scalable, cloud-native foundation from the ground up
- By combining cutting-edge data architecture with advanced analytics, we empower our threat hunters, data scientists, and incident responders with the real-time, trusted intelligence needed to protect the enterprise at scale
- As the Principal Cybersecurity Data Engineer, you will be the technical catalyst driving our transformation from a legacy data collection model into a mature, enterprise-grade Cybersecurity Data Organization
- Sitting at the critical intersection of advanced data engineering and security operations, you will lead the Data Logistics vertical to architect the pipelines that power our next-generation security data lakehouse
- We are currently undertaking a massive modernization effort—migrating off legacy infrastructure and scaling our ingestion from a handful of data sources to over 300+ complex, high-velocity security feeds
- We need a dual-domain expert to turbocharge this transformation, build missing foundational capabilities from the ground up, and mentor a globally distributed team on modern data engineering standards
- In this role, you aren’t just moving data; you are engineering the real-time, high-fidelity intelligence nervous system that powers our enterprise defense, threat hunting, and AI-enabled detection strategies
- Enterprise-Scale Architecture: Design and implement the ingestion, enrichment, and semantic layers for our centralized data lakehouse, ensuring pipelines can handle the extreme velocity and scale required for real-time cyber defense
- Massive Pipeline Scaling: Redesign our data onboarding and pipeline architecture to exponentially scale our capabilities, successfully shunting thousands of highly complex security telemetry sources from legacy systems (Splunk) into the modern lakehouse
- Data Observability & Reliability: Architect and deploy robust data observability, quality, and reliability frameworks from scratch. You will ensure downstream users (SIRT, Detection Engineering) have absolute trust in the fidelity of their telemetry
- Technical Leadership & Transformation: Serve as the technical anchor for the Data Logistics team. You will fill a critical operational void, mentoring engineers, instilling modern coding and automation practices, and steering the team away from legacy tech-debt mentalities
- AI & Advanced Analytics Enablement: Structure and model complex security data to directly enable advanced analytics, data science initiatives, and the deployment of our upcoming AI-driven security platforms
Our take
Workday is a cloud-based software vendor that provides management of workforces and finances. The company uses a single database for workforce management and financial management to offer integration and optimize business intelligence across companies. It has added to the packages and tools it offers over the years, providing analytic options that allow companies to combine third-party data with information collected by Workday.
The company has also grown through acquisitions and partnerships to broaden its capabilities. Most recently, in 2025 it purchases Sana, an AI-driven enterprise knowledge and learning platform, to create a "new front door for work". This acquisition allows Workday to integrate Sana's AI-powered search, agents, and learning capabilities with its own data and workflows, allowing employees to access information, automate tasks, and complete their day entirely within Workday.
Through a combination of strategic acquisitions and in-house development, Workday has built a comprehensive suite of HR, financial, and enterprise tools. By focusing on innovation and AI-driven workflows, the company continues to push productivity and decision-making for organizations worldwide. Building on this track record, Workday is very much positioned for even more growth, reinforcing its status as a leader in shaping the future of work.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Oct 2011
$85m
SERIES F
Apr 2009
$75m
SERIES E
Total funding: $215.3m
Company HQ
Pleasanton, CA
Leadership
Aneel Bhusri
(Co-Founder & CEO)Annel began their career at Morgan Stanley as a Corporate Finance Analyst. They then spent nearly 6 years at PeopleSoft as a Senior VP before co-founding Workday in 2005.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 96 more jobs at Workday