[Hiring] Cyber Defense & SaaS Security Manager @HealthEquity

Role Description

The Manager, Cyber Defense & SaaS Security is a hands-on, technical role split between owning the SaaS Security function end-to-end (75%) and serving as the Cyber Defense representative supporting the Security Operations Center (SOC) floor (25%).

• In the SaaS Security capacity, this role is the primary owner of SaaS-related tooling, risk, threats, gaps, and detections.
• Partnering across Cyber Defense and other lanes of the business to secure HealthEquity's SaaS footprint end to end.
• Provides Cyber Defense presence during core business hours, running the SOC floor and enabling timely coordination on real-time security and operational issues.
• Requires strong hands-on technical depth in SaaS security balanced with the presence and judgment to be a trusted point of contact for real-time coordination on the floor.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field; equivalent experience will be considered in lieu of degree.
• 5–8 years of cybersecurity experience, with meaningful hands-on time in SaaS security, cloud security, or application security.
• Direct experience administering or operating SaaS Security Posture Management (SSPM), CASB, or similar SaaS/cloud security tooling.
• Experience working in or closely with a Security Operations Center (SOC) environment is strongly preferred.
• Experience in a regulated industry (healthcare, financial services, or similar) is strongly preferred.

Requirements

• Deep working knowledge of SaaS security risk, including OAuth/app permission models, SaaS-to-SaaS integration risk, and common SaaS misconfiguration patterns.
• Hands-on detection engineering skills applicable to SaaS and identity-centric attack techniques.
• Working knowledge of the MITRE ATT&CK framework as it applies to cloud and SaaS environments.
• Strong cross-functional partnering skills, with the ability to influence application owners, IT, and engineering teams without formal authority.
• Comfortable operating as a point of contact for the SOC floor, with strong real-time judgment and communication skills.
• Relevant certifications preferred: GCTI, GCIH, AZ-500, or equivalent cloud/SaaS security certifications.

Benefits

• Medical, dental, and vision.
• HSA contribution and match.
• Dependent care FSA match.
• Uncapped paid time off.
• Paid parental leave.
• 401(k) match.
• Personal and healthcare financial literacy programs.
• Ongoing education & tuition assistance.
• Gym and fitness reimbursement.
• Wellness program incentives.