Cyber Def. & SaaS Security Mgr

Maintain an accurate inventory and risk register of SaaS applications in use across the organization, including unsanctioned or unmanaged SaaS discovered through monitoring.

Report on SaaS security posture, risk trends, and program maturity to Cyber Defense leadership.

Represent SaaS Security in cross-functional security initiatives, audits, and vendor risk assessments as needed.

Direct the day-to-day work of the assigned Cyber Defense contractor, assigning priorities and reviewing output to ensure consistent SaaS Security coverage.

Onsite Cyber Defense Representative — 25% of role

Serve as the onsite Cyber Defense representative during core business hours (8:00 AM–4:00 PM, Monday–Friday), providing in-person presence and support for the Security Operations Center (SOC) floor.

Support timely, in-person coordination of real-time security and operational issues as they arise, connecting SOC analysts with the appropriate Cyber Defense resources or escalation paths.

Act as a visible, accessible point of contact for the SOC team and other onsite stakeholders needing rapid Cyber Defense input or triage support.

Help maintain day-to-day SOC floor operational rhythm, flagging emerging issues or coordination gaps to the appropriate team leads.

Assist with in-person coordination during active incidents occurring during onsite hours, in support of the broader Incident Command process.

What you will need to be successful

Education and Experience

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field; equivalent experience will be considered in lieu of degree.

5–8 years of cybersecurity experience, with meaningful hands-on time in SaaS security, cloud security, or application security.

Direct experience administering or operating SaaS Security Posture Management (SSPM), CASB, or similar SaaS/cloud security tooling.

Experience working in or closely with a Security Operations Center (SOC) environment is strongly preferred.

Experience in a regulated industry (healthcare, financial services, or similar) is strongly preferred.

Knowledge, Skills, and Abilities

Deep working knowledge of SaaS security risk, including OAuth/app permission models, SaaS-to-SaaS integration risk, and common SaaS misconfiguration patterns.

Hands-on detection engineering skills applicable to SaaS and identity-centric attack techniques.

Working knowledge of the MITRE ATT&CK framework as it applies to cloud and SaaS environments.

Strong cross-functional partnering skills, with the ability to influence application owners, IT, and engineering teams without formal authority.

Comfortable operating as a visible, in-person point of contact on a SOC floor, with strong real-time judgment and communication skills.

Ability to reliably work onsite during designated hours and balance focused technical ownership work with in-person floor support.

Relevant certifications preferred: GCTI, GCIH, AZ-500, or equivalent cloud/SaaS security certifications.

Working Conditions

This role requires in-office presence Monday through Friday, 8:00 AM to 4:00 PM, to support SOC floor coverage; the remaining SaaS Security portion of the role may be performed onsite or remotely per team norms. Occasional availability outside standard hours may be required to support active security incidents.

The actual compensation offer is determined based on job-related knowledge, education, skills, experience, and work location. This position will be eligible for performance-based incentives and restricted stock units as part of the total compensation package, in addition to a full range of benefits including:

Medical, dental, and vision

HSA contribution and match

Dependent care FSA match

Uncapped paid time off

Paid parental leave

401(k) match

Personal and healthcare financial literacy programs

Ongoing education & tuition assistance

Gym and fitness reimbursement

Wellness program incentives

Onboarding & Travel

This is a remote role, with an in-person onboarding training component . New team members must participate in Trailhead, HealthEquity’s immersive onboarding experience Trailhead is designed to foster meaningful connections, support your integration into the organization, and equip you with a strong understanding of our business. Trailhead participation is a key expectation of this role. Trailhead is held onsite at our headquarters once per quarter. HealthEquity covers all required travel and accommodations.

This role may begin with a virtual, self-paced onboarding experience, followed by a mandatory onsite Trailhead session at a later date .

HealthEquity is committed to providing reasonable accommodations to team members with qualifying disabilities. Should you be selected for this role and require an accommodation , we will put you in touch with our Benefits Team so you can begin the accommodation request process.

Position Eligible for RSUs – Non-Exempt

Dependent c are FSA match

Full-time team members receive a minimum of 18 days of annual PTO and 13 paid holidays per year

Paid p arental l eave

Ongoing e ducation & t uition a ssistance

Gym and f itness r eimbursement

Wellness p rogram incentives

HealthEquity has a vision that by 2030 we will make HSAs as wide-spread and popular as retirement accounts. We are passionate about providing a solution that allows American families to connect health and wealth . Join us and discover a work experience where the person is valued more than the position. Click here to learn more.