HEALTHEQUITY, INC. logo

Principal Security Engineer

HEALTHEQUITY, INC.

Remote · USJobSeen todaySeen in employer's feed today

Most applications go out cold — see where you stand first. No sign-up to start.

Watch jobs like this.

At a glance

Compensation
No compensation found
Location
Remote · US
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Job overview

As a Principal Security Engineer focused on AI Offensive Security, this role builds and operates agentic systems to discover, validate, and help remediate vulnerabilities across web applications and cloud environments. The engineer combines software engineering with offensive security, develops automation and integrations, validates findings, and supports penetration testing and purple-team activities while applying established architectural patterns, governance requirements, and human-in-the-loop controls.

Skills & qualifications

RequiredNice to have

Skills

Production Software DevelopmentAutomation PlatformsSecurity ToolingAI WorkflowsAgentic SystemsLLM AutomationAgent FrameworksOrchestration PatternsStructured ContextTool IntegrationEvaluation ApproachesTechnical DocumentationWorkflow AutomationAPIsCloud ServicesAutomation FrameworksData PipelinesAI-Assisted Development ToolsLLM TechnologiesProduction AI SystemsWeb Application Security TestingAPI Security TestingCloud Security TestingOWASP Top 10AuthenticationAuthorization

Full job description

Principal Security Engineer Job Locations US-Remote Our Mission Our mission is to SAVE AND IMPROVE LIVES BY EMPOWERING HEALTHCARE CONSUMERS.Come be part of remarkable. Overview How you can make a difference As a Principal Security Engineer, AI Offensive Security, you build and operate agentic systems that discover, validate, and help remediate vulnerabilities across HealthEquity. You combine strong software engineering skills with offensive security expertise to automate security testing and vulnerability workflows across web applications and modern cloud environments. You are an experienced builder who translates offensive security techniques into scalable automation. Working within established architectural patterns and security standards, you develop and enhance agentic capabilities that improve the speed, consistency, and coverage of vulnerability discovery and remediation. The systems you build help move validated findings from identification through remediation while reducing manual effort and increasing the effectiveness of the security program. What you'll be doing Build and maintain offensive security agents that automate reconnaissance, enumeration, vulnerability validation, and other security testing activities across web and cloud environments. * Develop agentic workflows that support attack surface management and vulnerability management programs. * Implement automation that combines deterministic components (APIs, infrastructure-as-code, data pipelines) with non-deterministic, LLM-driven steps, choosing the right approach for each. * Build integrations between security tooling, ticketing platforms, asset inventories, CI/CD pipelines, and threat intelligence sources. * Apply established architectural patterns, governance requirements, and human-in-the-loop controls when developing AI-enabled security capabilities. * Validate findings generated by automated systems, reproduce vulnerabilities, and assist with risk assessment and prioritization. * Develop monitoring, testing, and evaluation capabilities that improve the reliability and effectiveness of agentic systems. * Support penetration testing and purple-team activities focused on validating vulnerabilities, controls, and remediation efforts. * Partner with Cyber Threat Intelligence, Security Engineering, and Vulnerability Management teams to improve detection and response capabilities. * Raise technical concerns, recommend improvements, and contribute to the evolution of team tools, practices, and automation capabilities. What you will need to be successful This role requires hands-on experience building and operating AI-enabled automation combined with practical offensive security expertise in modern web application and cloud environments. Engineering and AI Expertise * Experience building and operating production software, automation platforms, or security tooling. * Experience developing or extending AI-enabled workflows, agentic systems, or LLM-powered automation solutions. * Familiarity with agent frameworks, orchestration patterns, structured context, tool integration, and evaluation approaches. * Ability to document technical processes and automate repetitive workflows through software and AI-enabled solutions. * Proficiency developing software and integrations using APIs, cloud services, automation frameworks, and data pipelines. * Experience using AI-assisted development tools and LLM technologies to accelerate engineering and automation outcomes. * Understanding of the strengths, limitations, and operational considerations associated with production AI systems . Offensive Security Expertise * Hands-on experience testing modern web applications, APIs, and cloud environments. * Knowledge of OWASP Top 10 vulnerabilities, authentication and authorization... For full info follow application link

Similar jobs, posted recently

Open roles like this one, listed in the last 30 days.

You've read the whole posting — now see how you match it.