Senior Security Operations Engineer

Core responsibilities:

• Lead and coordinate responses to security incidents including ransomware, host compromise, credential and account compromise, phishing, insider threats, third-party risks, and data spillage
• Produce clear, accurate incident documentation and post-incident analysis focused on root cause and measurable improvement
• Improve Security Operations practices by contributing to the development, refinement, and maintenance of SOC procedures, playbooks, policies, and guidelines
• Own and act as a subject matter expert for one or more core security tools or platforms, ensuring data quality, reliable operation, and effective use

This role protects Workiva's SaaS platform, customers, and data across cloud environments by detecting, investigating, and responding to security threats while continuously improving monitoring, automation, and response capabilities.

Required qualifications:

• Undergraduate degree or 3 years equivalent combination of experience of education and experience in a related field
• Experience investigating security alerts or incidents involving infrastructure, identity, endpoints, or applications
• In-depth knowledge of cloud environments such as AWS, Azure, and/or GCP, with curiosity to deepen cloud security expertise
• Experience working in security operations, incident response, or a related defensive security role

Compensation and benefits:

• Salary range in the US: $111,000.00 - $178,000.00
• A discretionary bonus typically paid annually
• Restricted Stock Units granted at time of hire
• 401(k) match and comprehensive employee benefits package
• Workiva supports employees in working where they work best - either from an office or remotely from any location within their country of employment

Workiva is a company that provides a SaaS platform and supports employees in working where they work best - either from an office or remotely from any location within their country of employment.