Overview:
- This role builds HealthEquity's defenses for AI use cases on two core security platforms, Cloudflare and Palo Alto Networks.
- It is a hands-on engineering role where you will design, build, deploy, and operate these controls in production.
What you'll be doing:
- Build defenses for AI applications, agents, and MCP servers, including DLP, rate limiting, and audit logging.
- Own the Cloudflare platform: WAF, API Shield, Bot Management, DNS, TLS, and Cloudflare One services.
- Own the Palo Alto Networks platform: firewalls, Panorama, Prisma Access, and automation.
What you will need to be successful:
- 7+ years in security, network, or infrastructure engineering.
- Deep hands-on experience with Cloudflare or Palo Alto Networks, plus production experience with the other.
- Working knowledge of AI-specific threats and OWASP Top 10 for LLM applications.
What success looks like:
- First 90 days: inventory of AI applications and DLP in monitor mode.
- First 6 months: runtime protections and AI-related detections in the SIEM.
- First 12 months: reference architecture for AI agents and measurable reduction in firewall rule debt.