Sr Cyber Engineer (Fully Remote)

HealthEquity; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

HealthEquity is seeking an experienced security engineer to design, build, deploy, and operate defenses for AI use cases across Cloudflare and Palo Alto Networks platforms. You will own the Cloudflare and Palo Alto Networks components in production, implementing DLP, rate limiting, audit logging, and AI-specific threat detections.

The role requires 7+ years in security, network, or infrastructure engineering, deep hands-on Cloudflare or Palo Alto experience with production exposure to the other,

Qualifications

• 7+ years in security, network, or infrastructure engineering.
• Deep hands-on experience with Cloudflare or Palo Alto Networks, plus production experience with the other.
• Working knowledge of AI-specific threats and OWASP Top 10 for LLM applications.

Responsibilities

• Build defenses for AI applications, agents, and MCP servers, including DLP, rate limiting, and audit logging.
• Own the Cloudflare platform: WAF, API Shield, Bot Management, DNS, TLS, and Cloudflare One services.
• Own the Palo Alto Networks platform: firewalls, Panorama, Prisma Access, and automation.

Skills

Security engineering

Cloudflare

Palo Alto Networks

Tools

WAF

Prisma Access

SIEM

Job description

• This role builds HealthEquity's defenses for AI use cases on two core security platforms, Cloudflare and Palo Alto Networks.
• It is a hands-on engineering role where you will design, build, deploy, and operate these controls in production.

What you'll be doing:

• Build defenses for AI applications, agents, and MCP servers, including DLP, rate limiting, and audit logging.
• Own the Cloudflare platform: WAF, API Shield, Bot Management, DNS, TLS, and Cloudflare One services.
• Own the Palo Alto Networks platform: firewalls, Panorama, Prisma Access, and automation.

What you will need to be successful:

• 7+ years in security, network, or infrastructure engineering.
• Deep hands-on experience with Cloudflare or Palo Alto Networks, plus production experience with the other.
• Working knowledge of AI-specific threats and OWASP Top 10 for LLM applications.

What success looks like:

• First 90 days: inventory of AI applications and DLP in monitor mode.
• First 6 months: runtime protections and AI-related detections in the SIEM.
• First 12 months: reference architecture for AI agents and measurable reduction in firewall rule debt.

HealthEquity

HealthEquity empowers healthcare consumers by providing health savings accounts and financial wellness solutions. The company values innovation and inclusion, with a mission to make HSAs as widespread as retirement accounts by 2030.