Associate Cyber Engineer
About The Position
HealthEquity is hiring an Associate Cyber AI Engineer for a hands-on engineering role spanning AI triage and automation and security data engineering. The role builds AI agents and LLM-assisted workflows to triage, enrich, correlate, and help resolve security alerts, along with the data pipelines that collect, shape, and route the security telemetry those workflows rely on. The engineer connects AI to security tools and works directly in the organization’s defense platforms, with support from senior engineers while developing in the role. The position also supports incident response, partners with Cyber Operations analysts to automate manual work, and documents architecture and workflows so systems can be maintained by others. This is a remote role with required in-person onboarding at the company headquarters through its quarterly Trailhead program; required travel and accommodations are covered. The role may begin with virtual, self-paced onboarding before a later mandatory onsite session.
Requirements
- 3+ years in IT, identity, or cyber engineering.
- Working proficiency in at least one scripting or programming language.
- Experience building with AI or LLM tools.
- Experience with IT or cyber automation.
- Familiarity with security data, logging, or SIEM platforms.
- Ability to explain automated decisions clearly to technical and non-technical audiences.
Responsibilities
- Help build and maintain AI agents that triage, enrich, and correlate security alerts and tickets using a tiered-autonomy model.
- Develop and test LLM-assisted workflows for investigation support, case summaries, and response recommendations.
- Connect AI agents to security tools through APIs and the Model Context Protocol (MCP), using least-privilege access.
- Build auditable decision trails for automated actions, including auto-close and auto-remediation.
- Track automation effectiveness, including accuracy, time saved, and escalation rates.
- Build and maintain data pipelines that onboard, parse, normalize, enrich, and route security telemetry for AI and detection workflows.
- Mask sensitive data in pipelines and handle health and financial data in line with HIPAA, SOC 2, and HITRUST requirements.
- Monitor source health to catch logging gaps before they affect triage.
- Maintain integrations among the data pipeline, SOAR, and ticketing.
- Troubleshoot automation and pipeline issues, and support the team during active incidents.
- Partner with Cyber Operations analysts to turn manual steps into trusted automation.
- Document architecture, workflows, and automated decision logic so other engineers can maintain the work.
- Help put an AI triage workflow into production that measurably reduces manual triage.
- Take on day-to-day monitoring of security data pipeline health.
Benefits
- Medical, dental, and vision coverage.
- HSA contribution and match.
- Dependent care FSA match.
- At least 18 days of annual PTO and 13 paid holidays per year for full-time team members.
- Paid parental leave.
- 401(k) match.
- Personal and healthcare financial literacy programs.
- Ongoing education and tuition assistance.
- Gym and fitness reimbursement.
- Wellness program incentives.
- Performance-based incentives as part of total compensation.
- Required travel and accommodations for onboarding are covered.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
No Education Listed
