Remote opportunity at
HealthEquitySr Cyber Engineer
HealthEquity seeks a Sr Cyber Engineer to build defenses for emerging generative AI use cases, protect member data, and operate core security platforms including Cloudflare and…
Career Tools
About This Role
HealthEquity seeks a Sr Cyber Engineer to build defenses for emerging generative AI use cases, protect member data, and operate core security platforms including Cloudflare and Palo Alto Networks. HealthEquity aims to expand the adoption of healthcare consumer tools while safeguarding applications against risks like prompt injection and sensitive data exposure. This hands-on engineering position designs, builds, deploys, and operates production security controls. This role suits professionals with extensive experience…
Job Description
HealthEquity seeks a Sr Cyber Engineer to build defenses for emerging generative AI use cases, protect member data, and operate core security platforms including Cloudflare and Palo Alto Networks. HealthEquity aims to expand the adoption of healthcare consumer tools while safeguarding applications against risks like prompt injection and sensitive data exposure. This hands-on engineering position designs, builds, deploys, and operates production security controls.
This role suits professionals with extensive experience in security, network, or infrastructure engineering, particularly those familiar with securing AI systems, managing Cloudflare environments, and administering Palo Alto Networks firewalls. Successful candidates will collaborate with application security, compliance, and product teams to enforce robust policies, handle incident escalations, and participate in an on-call rotation.
Responsibilities
- Discover and govern AI usage across the organization by applying allow, monitor, isolate, or block policies
- Design and tune data loss prevention for prompts, file uploads, responses, and agent tool calls to protect member PHI, PII, and financial data
- Deploy runtime protections and audit logging for production AI applications, agents, and LLM provider traffic
- Define secure authentication, tool access, and logging for AI agents and approved MCP servers
- Work with product and fraud prevention teams to enforce bot controls against AI crawlers and agents on member and employer sites
- Execute adversarial testing against AI applications covering prompt injection, data exfiltration, and tool misuse
- Engineer and operate the Cloudflare environment including WAF, API Shield, Bot Management, and Cloudflare One services
- Engineer and operate Palo Alto Networks hardware, VM-Series, Cloud NGFW, Panorama, Strata Cloud Manager, Prisma Access, and GlobalProtect
- Send telemetry to the SIEM and build detections for AI-related activity and unusual agent behavior
- Write design documents, runbooks, and standards while mentoring other engineers
Requirements
- 7+ years of experience in security, network, or infrastructure engineering
- Deep hands-on engineering experience with either Palo Alto Networks or Cloudflare, and production experience with the other
- Hands-on experience securing generative AI applications, traffic, or gateways
- Working knowledge of AI-specific threats, OWASP Top 10 for LLM and Agentic Applications, and MITRE ATLAS
- Strong networking fundamentals including TCP/IP, routing, BGP, DNS, TLS and PKI, HTTP, proxies, and IPsec
- Infrastructure-as-code and automation experience with Terraform, Git, CI/CD, and Python
- Experience integrating identity protocols with an enterprise identity provider
- Experience in a regulated environment handling sensitive health or financial data under HIPAA, PCI DSS, or SOC 2
Qualifications
- Palo Alto Networks Next-Generation Firewall Engineer or Network Security Professional certification
- Active PCNSE certification
- Hands-on experience with Prisma AIRS, Cloudflare AI Gateway, AI Security for Apps, or MCP server portals
- Development experience on Cloudflare Workers using JavaScript or TypeScript
- Experience building or securing AI agents and MCP servers
- Cloud network security experience in AWS, Azure, or Google Cloud
- Detection engineering experience with Cortex XSIAM, Splunk, Microsoft Sentinel, or similar platforms
- Familiarity with the NIST AI Risk Management Framework or ISO/IEC 42001
Core Skills
Benefits
- Medical, dental, and vision coverage
- HSA contribution and match
- Dependent care FSA match
- Uncapped paid time off
- Paid parental leave
- 401(k) match
- Personal and healthcare financial literacy programs
- Ongoing education and tuition assistance
- Gym and fitness reimbursement
- Wellness program incentives
- Performance-based incentives
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote position?
Yes, this is a remote position that includes an in-person onboarding training component at the company headquarters once per quarter.
What is the salary range for the Sr Cyber Engineer role?
The salary range listed in the posting is $120,500.00 per year, with the final offer determined by job-related knowledge, education, skills, experience, and work location.
What level of experience is required for this role?
Candidates need 7 or more years of experience in security, network, or infrastructure engineering, along with hands-on production experience with Palo Alto Networks and Cloudflare.
What benefits are provided with this job?
HealthEquity offers medical, dental, and vision insurance, an HSA contribution and match, a dependent care FSA match, uncapped paid time off, paid parental leave, a 401(k) match, tuition assistance, and fitness reimbursements.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.