Skills this job asks for
CybersecurityTriageCompliance
Add your CV (free) to see which of these your CV is missing.
Sponsorship verdict
Sponsorship possible
One solid signal, not two. Worth applying, and worth asking about sponsorship early.
-
✓
Employer is on a government sponsor recordThe US Department of Labor certified 255 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first.
-
?
The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
-
?
No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area.
-
✓
What Workday INC paid sponsored hires in similar roles8 certified filings for “Sr Cybersecurity Engineer” (Information Security Analysts) in VA: $130k–$156k, median $156k.
-
✓
Confirmed live todayWhen a source last listed this job as open.
Details and sources
- Employer is on a government sponsor record
- The US Department of Labor certified 255 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. Source: LCA disclosure data (US Department of Labor (OFLC)).
- No salary bar for this route
- H-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
- What Workday INC paid sponsored hires in similar roles
- 8 certified filings for “Sr Cybersecurity Engineer” (Information Security Analysts) in VA: $130k–$156k, median $156k. Most were filed at wage level II (100%) — 2 lottery entries, ≈31% projected selection odds for cap-subject employers. Source: US Department of Labor LCA disclosure data (Oct 2025 – Jun 2026).
US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).
A verdict summarises public evidence. It is not legal advice and never a guarantee: the employer and the immigration authority decide. Sign in to factor in where you can already work.
About the role
Your work days are brighter here.
We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.
About the Team
The Enterprise Security Engineering team is the frontline of Workday's enterprise defense, ensuring that our global corporate environment remains secure, resilient, and ready to support the pace of innovation across the company. We sit at the intersection of endpoint infrastructure, developer enablement, and security automation — protecting Workday's corporate fleet while empowering our engineering community to build and ship with confidence.
Our work spans endpoint privilege management, endpoint detection and response (EDR), SaaS security posture management (SSPM), and the governance of developer tools and emerging AI technologies. In the year ahead, the team will focus on expanding agentic automation pipelines, evolving our application control frameworks to support safe AI adoption, and deepening cross-pillar integration between endpoint, SaaS posture, and threat detection systems.
What makes this team special is our commitment to engineering excellence and to each other. We invest deeply in mentorship and talent development, helping engineers at every level grow their technical depth and take ownership of their domains. If you enjoy solving meaningful security challenges alongside a collaborative, forward-thinking group, this team is for you.
About the Role
As a Senior Cybersecurity Engineer on the Enterprise Security Engineering team, you will bridge strategic architecture and operational delivery. You will take ownership of detection telemetry, SaaS configuration drift, and asset-control gap verification, while providing high-touch escalation support and technical guidance to associate and mid-level engineers.
Key Responsibilities:
• Partner with Principal engineers to support endpoint least-privilege policies, publisher allow-listing controls, and application governance workflows across macOS and Windows fleets. Serve as an escalation point for complex application definition triage and advanced exception reviews.
• Develop engineering oversight, sensor health monitoring, and detection tuning across our enterprise EDR estate. Build and maintain automated detection and containment response workflows, partnering with internal teams to triage complex endpoint telemetry.
• Support the operational posture and policy configuration baseline across our SSPM environment. Identify, investigate, and remediate SaaS configuration drift, privileged account anomalies, and integration risks across critical enterprise SaaS services.
• Drive asset governance, device coverage validation, and security control gap identification through Cyber Asset Attack Surface Management (CA
Apply on employer site ↗