Associate Cyber Engineer

How you can make a difference  

We’re hiring an Associate Cyber AI Engineer to work in two connected areas: AI triage and automation — building the AI agents and LLM-assisted workflows that triage, enrich, and help resolve security alerts with less manual effort — and security data engineering — the pipelines that collect, shape, and route the security data those workflows depend on. This is a hands-on engineering role, not a policy or oversight role. You’ll be building automation, connecting AI to security tools, and working directly in the platforms our defense stack runs on, with support from senior engineers as you grow.

AI Triage and Automation

• Help build and maintain AI agents that triage, enrich, and correlate security alerts and tickets using a tiered-autonomy model.
• Develop and test LLM-assisted workflows for investigation support, case summaries, and response recommendations.
• Connect AI agents to security tools through APIs and the Model Context Protocol (MCP), with least-privilege access.
• Build auditable decision trails for automated actions, including auto-close and auto-remediation.
• Track automation effectiveness, including accuracy, time saved, and escalation rates.

Security Data Engineering

• Build and maintain the data pipelines that feed AI and detection workflows: onboard, parse, normalize, enrich, and route security telemetry.
• Mask sensitive data in pipelines, and handle health and financial data in line with HIPAA, SOC 2, and HITRUST requirements.
• Monitor source health so logging gaps are caught before they affect triage.
• Maintain integrations between the data pipeline, SOAR, and ticketing.

Shared responsibilities

• Help troubleshoot automation and pipeline issues, and support the team during active incidents.
• Partner with Cyber Operations analysts to turn manual steps into automation they trust.
• Document architecture and workflows so capabilities don't depend on one person.

• 3+ years in IT, identity, or cyber engineering.
• Working proficiency in at least one scripting or programming language.
• Experience building with AI or LLM tools.
• Experience with IT or cyber automation.
• Familiarity with security data, logging, or SIEM platforms.
• Ability to explain automated decisions clearly to technical and non-technical audiences.

• Help put an AI triage workflow into production that measurably reduces manual triage.
• Take on day-to-day monitoring of security data pipeline health.
• Document the logic behind the automated decision paths you work on.
• Leave enough documentation that another engineer can maintain the work.

#LI-Remote

This is a remote position.

The actual compensation offer is determined based on job-related knowledge, education, skills, experience, and work location. This position will be eligible for performance-based incentives as part of the total compensation package, in addition to a full range of benefits including:  

• Medical, dental, and vision 
• HSA contribution and match 
• Dependent care FSA match 
• Full-time team members receive a minimum of 18 days of annual PTO and 13 paid holidays per year 
• Paid parental leave 
• 401(k) match 
• Personal and healthcare financial literacy programs 
• Ongoing education & tuition assistance 
• Gym and fitness reimbursement 
• Wellness program incentives 

Onboarding & Travel

This is a remote role, with an in-person onboarding training component. New team members must participate in Trailhead, HealthEquity’s immersive onboarding experience Trailhead is designed to foster meaningful connections, support your integration into the organization, and equip you with a strong understanding of our business. Trailhead participation is a key expectation of this role. Trailhead is held onsite at our headquarters once per quarter. HealthEquity covers all required travel and accommodations. 

This role may begin with a virtual, self-paced onboarding experience, followed by a mandatory onsite Trailhead session at a later date.