Senior Security Engineer – Workday Specialist

About the role

We are looking for a hands‑on Workday developer who fully understands HCM modules and can customize workflows, with a strong focus on performance management and metrics. The role also requires deep expertise in Red Team operations to protect critical infrastructure.

Key responsibilities

• Participate in the execution of Red Team cyber exercises for internal and internet‑facing systems to identify misconfigurations and vulnerabilities.
• Lead Red Team engagements against hybrid environments using threat intelligence and the MITRE ATT&CK framework.
• Collaborate in Purple Team exercises to improve Blue Team detection capabilities.
• Build and maintain Red and Purple team infrastructure, automating functions where possible.
• Research and disseminate new offensive security tactics, techniques, and procedures.
• Conduct ad‑hoc offensive security testing with industry‑standard or custom tools.
• Produce detailed technical reports, compromise narratives, and risk severity ratings.
• Assist cyber‑defense teams during incident investigations, providing attacker tradecraft expertise.

Required profile

• Expert understanding of Red Team concepts, tools, and automation strategies.
• Deep knowledge of the MITRE ATT&CK framework and vulnerability rating methodologies.
• Strong grasp of Windows and Linux system hardening techniques.
• Proficiency with at least one scripting language (Python, Ruby, PowerShell, Bash, etc.).
• Experience with cloud environments such as AWS, GCP, or Azure.
• Relevant certifications (e.g., GPEN, OSCP, OSWE, CISSP, etc.).
• Familiarity with industry security standards (NIST, ISO‑27002, etc.) and Agile project management.

Required skills

• Cobalt Strike
• Mythic C2
• Rubeus
• Bloodhound
• Covenant
• Python
• Ruby
• PowerShell
• Bash
• AWS
• GCP
• Azure
• Chef