This role supports U.S. Federal Government contracts requiring United States citizenship and involves protecting enterprise and government SaaS environments
Job Summary
This role supports U.S. Federal Government contracts requiring United States citizenship and involves protecting enterprise and government SaaS environments.
The engineer is responsible for engineering high-fidelity detection logic using Splunk, AWS telemetry, and identity access data to reduce adversary dwell time.
Workday offers a competitive salary range of $159,600 to $258,000 USD along with flexible work arrangements requiring at least 50% time in-office or field.
Matching Summary
This role supports U.S. Federal Government contracts requiring United States citizenship and involves protecting enterprise and government SaaS environments.
Salary
Base: $159,600 - $239,400 USD (McLean); Additional locations: $144,400 - $258,000 USD; Bonus/Equity: Eligible for Workday Bonus Plan and stock grants
Skills & Requirements
Must-have
Splunk correlation searches and SPL development
FedRAMP High and DoD IL5 compliance experience
AWS security services (CloudTrail, GuardDuty)
MITRE ATT&CK mapping and adversary tradecraft
NIST SP 800-61r3 incident response lifecycle
Nice-to-have
Hypothesis-driven threat hunting in SaaS
Identity-based attack vector detection
Container and workload-level attack detection
SOAR platform experience in constrained environments
Secure logging architectures in air-gapped settings
Key Requirements
6+ years of cybersecurity operations or detection engineering experience
Bachelor's degree in Cybersecurity, Computer Science, Engineering, or equivalent
Ability to obtain and maintain TS/SCI w/CI Poly security clearance
Must be a United States citizen (naturalized or native)