As a Senior Security Operations Engineer at Workiva, you will play a crucial role in protecting our SaaS platform, customers, and data across cloud environments such as AWS, Azure, and GCP. You will operate as a senior individual contributor within the Security Operations team, responsible for detecting, investigating, and responding to security threats while continuously improving our monitoring, automation, and response capabilities to ensure a swift and effective response to potential threats.This role blends deep technical investigation with operational rigor and proactive threat detection. You will work independently on complex security incidents, contribute to the evolution of our SOC capabilities, and partner closely with information security leadership and cross‑functional stakeholders. While the role does not include formal people management, you will be expected to provide technical mentorship and operational guidance to interns and peer engineers.What You’ll Do<ul><li>Lead and coordinate responses to security incidents, including ransomware, host compromise, credential and account compromise, phishing, insider threats, third-party risks, and data spillage while collaborating closely with information security leadership, business stakeholders, and the rest of the incident response team</li><li>Produce clear, accurate incident documentation and post‑incident analysis focused on root cause and measurable improvement</li><li>Participate in incident response tabletop exercises to identify gaps, enhance skills, and engage stakeholders; review technical reports from vulnerability and penetration testing assessments to identify potential exposure to future incidents</li><li>Improve Security Operations practices by contributing to the development, refinement, and maintenance of SOC procedures, playbooks, policies, and guidelines. </li><li>Participate in learning new approaches and industry best practices, and help evolve incident response processes to improve clarity, effectiveness, and situational awareness during security events.</li><li>Assess the effectiveness of security controls and technical risks across hosting environments, and communicate findings clearly to both technical and non-technical stakeholders. </li><li>Own and act as a subject matter expert for one or more core security tools or platforms, ensuring data quality, reliable operation, and effective use. This includes optimizing configurations, exploring new capabilities or integrations, maximizing value from the tool, and enabling others through documentation, knowledge sharing, and guidance on use and administration.</li><li>Focus on factual, data-driven analysis to explain business impact, trade-offs, and risk, supporting informed decision-making without reliance on fear or assumptions.</li></ul>What You'll NeedMinimum Qualifications<ul><li>Undergraduate degree or 3 years equivalent combination of experience of education and experience in a related field</li><li>Experience investigating security alerts or incidents involving infrastructure, identity, endpoints, or applications</li><li>In-depth knowledge of cloud environments such as AWS, Azure, and/or GCP, with curiosity to deepen cloud security expertise</li></ul>Preferred Qualifications<ul><li>Experience working in security operations, incident response, or a related defensive security role</li><li>Familiarity with SIEM platforms (Splunk preferred) and interest in using SOAR tooling such as Tines or other automation functions to improve response workflows</li><li>Comfort analyzing logs and telemetry data to understand suspicious or unusual behavior</li><li>Ability to assess technical and business risk and communicate findings clearly</li><li>Strong written and verbal communication skills, with the ability to explain complex topics to a range of audiences</li></ul><h2>Travel Requirements &amp; Working Conditions</h2><ul><li>Up to 20% travel for customer, partner, and internal meetings</li><li>Reliable internet access for periods of remote working</li></ul>How You’ll Be Rewarded✅ Salary range in the US: $111,000.00 - $178,000.00✅ A discretionary bonus typically paid annually✅ Restricted Stock Units granted at time of hire✅ 401(k) match and comprehensive employee benefits packageThe salary range represents the low and high end of the salary range for this job in the US. Minimums and maximums may vary based on location. The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and other relevant factors.Employment decisions are made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other protected characteristic.Workiva is committed to working with and providing reasonable accommodations to applicants with disabilities. To request assistance with the application process, please email <a href="mailto:talentacquisition@workiva.com">talentacquisition@workiva.com</a>.  Workiva employees are required to undergo comprehensive security and privacy training tailored to their roles, ensuring adherence to company policies and regulatory standards.Workiva supports employees in working where they work best - either from an office or remotely from any location within their country of employment.#LI-PM1

Workiva is on a mission to power transparent reporting for a better world. We build and deliver the world&rsquo;s leading cloud platform for assured integrated reporting to meet stakeholder demands for action, transparency, and disclosure of financial and non-financial data. Workiva offers the only unified SaaS platform that brings customers&rsquo; financial reporting, Environmental, Social, and Governance (ESG), and Governance, Risk, and Compliance (GRC) together in a controlled, secure, audit-ready platform. Our platform simplifies the most complex reporting and disclosure challenges by streamlining processes, connecting data and teams, and ensuring consistency. Learn more at workiva.com.

Senior Security Operations Engineer

As a Senior Security Operations Engineer at Workiva, you will play a crucial role in protecting our SaaS platform, customers, and data across cloud environments such as AWS, Azure, and GCP. You will operate as a senior individual contributor within the Security Operations team, responsible for detecting, investigating, and responding to security threats while continuously improving our monitoring, automation, and response capabilities to ensure a swift and effective response to potential threats.This role blends deep technical investigation with operational rigor and proactive threat detection. You will work independently on complex security incidents, contribute to the evolution of our SOC capabilities, and partner closely with information security leadership and cross‑functional stakeholders. While the role does not include formal people management, you will be expected to provide technical mentorship and operational guidance to interns and peer engineers.What You’ll Do<ul><li>Lead and coordinate responses to security incidents, including ransomware, host compromise, credential and account compromise, phishing, insider threats, third-party risks, and data spillage while collaborating closely with information security leadership, business stakeholders, and the rest of the incident response team</li><li>Produce clear, accurate incident documentation and post‑incident analysis focused on root cause and measurable improvement</li><li>Participate in incident response tabletop exercises to identify gaps, enhance skills, and engage stakeholders; review technical reports from vulnerability and penetration testing assessments to identify potential exposure to future incidents</li><li>Improve Security Operations practices by contributing to the development, refinement, and maintenance of SOC procedures, playbooks, policies, and guidelines.&nbsp;</li><li>Participate in learning new approaches and industry best practices, and help evolve incident response processes to improve clarity, effectiveness, and situational awareness during security events.</li><li>Assess the effectiveness of security controls and technical risks across hosting environments, and communicate findings clearly to both technical and non-technical stakeholders.&nbsp;</li><li>Own and act as a subject matter expert for one or more core security tools or platforms, ensuring data quality, reliable operation, and effective use. This includes optimizing configurations, exploring new capabilities or integrations, maximizing value from the tool, and enabling others through documentation, knowledge sharing, and guidance on use and administration.</li><li>Focus on factual, data-driven analysis to explain business impact, trade-offs, and risk, supporting informed decision-making without reliance on fear or assumptions.</li></ul>What You'll NeedMinimum Qualifications<ul><li>Undergraduate degree or 3 years equivalent combination of experience of education and experience in a related field</li><li>Experience investigating security alerts or incidents involving infrastructure, identity, endpoints, or applications</li><li>In-depth knowledge of cloud environments such as AWS, Azure, and/or GCP, with curiosity to deepen cloud security expertise</li></ul>Preferred Qualifications<ul><li>Experience working in security operations, incident response, or a related defensive security role</li><li>Familiarity with SIEM platforms (Splunk preferred) and interest in using SOAR tooling such as Tines or other automation functions to improve response workflows</li><li>Comfort analyzing logs and telemetry data to understand suspicious or unusual behavior</li><li>Ability to assess technical and business risk and communicate findings clearly</li><li>Strong written and verbal communication skills, with the ability to explain complex topics to a range of audiences</li></ul><h2>Travel Requirements &amp; Working Conditions</h2><ul><li>Up to 20% travel for customer, partner, and internal meetings</li><li>Reliable internet access for periods of remote working</li></ul>How You’ll Be Rewarded✅ Salary range in the US: $111,000.00 - $178,000.00✅ A discretionary bonus typically paid annually✅ Restricted Stock Units granted at time of hire✅ 401(k) match and comprehensive employee benefits packageThe salary range represents the low and high end of the salary range for this job in the US. Minimums and maximums may vary based on location. The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and other relevant factors.Employment decisions are made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other protected characteristic.Workiva is committed to working with and providing reasonable accommodations to applicants with disabilities. To request assistance with the application process, please email <a href="mailto:talentacquisition@workiva.com">talentacquisition@workiva.com</a>. &nbsp;Workiva employees are required to undergo comprehensive security and privacy training tailored to their roles, ensuring adherence to company policies and regulatory standards.Workiva supports employees in working where they work best - either from an office or remotely from any location within their country of employment.#LI-PM1

Senior Security Operations Engineer

About the Job

About the Company

Workiva

Similar Jobs

Senior Security Engineer

Senior Security Engineer

Senior Director, Security Engineering

Senior Director, Security Engineering

Network & Compliance Lead

Network & Compliance Lead

Senior Security Architect

Senior Security Architect

Lead Security Engineer

Lead Security Engineer

Senior Security Engineer

Senior Security Engineer

Senior Security Engineer

Senior Security Engineer

Sr Information Security Analyst

Sr Information Security Analyst

Senior Security Analyst

Senior Security Analyst

Senior Security Engineer, Security Operations

Senior Security Engineer, Security Operations