Principal Software Development Engineer

About the Team We are seeking a highly skilled Principal cybersecurity engineer to architect the development of our internal suite of Cybersecurity Risk Management and Automation tools. About the Role As a Principal engineer, you will serve as the primary visionary for how our risk data is structured, analyzed, and automated, acting as the bridge between the Cybersecurity Risk organization and our Engineering teams. Basic Qualifications 9+ years of experience building custom GRC (Governance, Risk, and Compliance) platforms. Proficiency in Python, Go, or Java with a strong background in version control, API design, and the ability to build complex PoCs for risk models. Mastery of the end‑to‑end SDLC, including engineering governance, comprehensive SRS documentation, project plans, and product backlogs to ensure architectural alignment. Verified ability to define system architectures, data models (ERDs), and API specifications while enforcing rigorous QA standards through formalized test plans, automated build scripts, and production operations manuals. Experience leading the technical roadmap for software engineering teams or data scientists without direct reporting authority (lead, principal, or staff level experience). Proficiency in data pipeline logic, ELT/ETL processes, and data quality assurance as they apply to automating security telemetry. Other Qualifications Strategic technical translation: Architect high‑level business and security end‑states into sophisticated process designs and technical specifications. Risk domain authority: Serve as the subject matter expert for defining risk metrics and calculation methodologies within Enterprise Risk Management (ERM) and Third‑Party Risk Management (TPRM). Cross‑functional influence: Champion security risk automation across the organization, mentoring junior engineers and influencing stakeholders on best practices for data‑driven risk modeling. Essential Domain Knowledge Mastery of cybersecurity risk, with a proven track record of designing and implementing Enterprise and Third‑Party Risk Management programs at scale. Architectural design: Ability to take an open specification and define complex security processes, translating them into technical user stories, functional specifications, and logic diagrams. Advanced risk modeling: Expertise in quantitative risk analysis (Monte Carlo simulations or FAIR methodology) and programmatic application of these models to software. Compensation and Benefits Base pay ranges vary by location: $184,800 USD – $277,200 USD for the primary location; $167,200 USD – $300,000 USD for additional U.S. locations. Eligibility for the Workday Bonus Plan, commissions, and annual refresh stock grants. Flexible Work Teams are encouraged to spend at least 50% of the time each quarter in the office or with clients. Remote work is supported and flexible scheduling is available to meet business and personal needs. Equality, Diversity, and Inclusion Workday is an Equal Opportunity Employer. Applications will be considered without regard to age, ancestry, color, gender, gender identity or expression, genetic information, marital status, medical condition, mental or physical disability, national origin, protected family care or medical leave status, race, religion, sexual orientation, or military or veteran status. We also consider applicants with arrest and conviction records where applicable. We do not accept resumes from headhunters or placement agencies that have not signed a formal agreement. #J-18808-Ljbffr