SaaS Security & Cyber Defense Lead

HealthEquity; Draper (UT); On-site; USD 121,000 - 157,000; Full time

Benefits offered by this job

Medical, dental, and vision

HSA match

PTO and holidays

Parental leave

401(k) match

Tuition assistance

Gym reimbursement

Wellness program

Job summary

HealthEquity is seeking a Manager, Cyber Defense & SaaS Security who will own the SaaS Security function end-to-end (~75%) and serve as the onsite Cyber Defense representative on the SOC floor (~25%). The role demands strong hands-on depth in SaaS security balanced with coordination across IT, engineering, and business owners.

The position requires 5–8 years in cybersecurity with SaaS security experience, SSPM/CASB tooling, and SOC familiarity.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 5–8 years of cybersecurity experience in SaaS, cloud, or application security.
• Direct experience administering SaaS security tooling (SSPM/CASB).
• Experience in or with an SOC environment is preferred.
• Experience in regulated industries (healthcare/financial) is preferred.

Responsibilities

• Own SaaS Security end-to-end including tooling strategy, deployment, and administration.
• Identify, assess and track risks across HealthEquity's SaaS footprint.
• Monitor for SaaS-specific threats and translate intelligence into detections.
• Close security gaps across SaaS environment including monitoring and access governance.
• Lead detection tuning for SaaS attack techniques in partnership with Threat Detection.

Skills

SaaS security

Threat detection

SOC operations

CASB/SSPM tooling

OAuth risk

Certifications

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

SSPM tooling

CASB

Security tooling

Job description

HealthEquity is seeking a Manager, Cyber Defense & SaaS Security who will own the SaaS Security function end-to-end (~75%) and serve as the onsite Cyber Defense representative on the SOC floor (~25%). The role demands strong hands-on depth in SaaS security balanced with coordination across IT, engineering, and business owners.

The position requires 5–8 years in cybersecurity with SaaS security experience, SSPM/CASB tooling, and SOC familiarity.