Note: The job is a remote job and is open to candidates in USA. Optum, part of UnitedHealth Group, delivers technology-enabled care and health services that help people live healthier lives. The Information Security Engineer will provide frontline security defense by triaging alerts, supporting users with security issues, investigating suspicious activity, escalating incidents, and improving security processes and automation.
Responsibilities
- Triage Security Alerts: Monitor and analyze security alerts from various sources (SIEM, EDR, email, etc.) to determine severity and required response
- User Support & Education: Serve as the first point of contact for security-related user issues, providing guidance, troubleshooting, and education
- Incident Escalation: Escalate confirmed or high-risk incidents to senior security engineers or incident response teams with clear documentation
- Threat Analysis: Perform initial investigation and enrichment of suspicious activity to support threat detection and response
- Tool Utilization: Leverage security tools (e.g., Splunk, CrowdStrike, Microsoft Defender, etc.) to investigate and resolve issues
- Documentation: Maintain accurate records of incidents, resolutions, and user interactions in ticketing systems
- Collaboration: Work closely with IT, compliance, and other security team members to ensure consistent and effective security practices
- Process Improvement: Identify trends, recurring issues, and process gaps from ticket queue activity; partner with subject matter experts to improve detections, streamline workflows, and evaluate automation opportunities
- Leverage enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement
Skills
- • Bachelor's degree in Cybersecurity, Information Technology, or Engineering related field
- • 2+ years of experience in information security, IT support, or SOC environments
- • 2+ years of experience with common security tools and platforms (e.g., SIEM, EDR, phishing analysis tools)
- • 2+ years of experience with security fundamentals (networking, endpoint protection, identity management)
- • Experience with scripting or automation (e.g., Python, PowerShell)
- • Security certifications such as CompTIA Security+, SSCP, or equivalent
- • Experience with Microsoft 365 security tools and cloud environments (Azure, AWS)
- • Familiarity with ITIL or similar service management frameworks
- • Experience with DLP Platforms (e.g. Broadcom, Zscaler, Proofpoint,)
- • Understanding of data classification models and encryption standards
- • Excellent communication and interpersonal skills, with a customer-first mindset
- • Ability to work in a fast-paced environment and manage multiple priorities
Benefits
- Flexibility to telecommute from anywhere within the U.S.
- Comprehensive benefits package
- Incentive and recognition programs
- Equity stock purchase
- 401k contribution
- Career development opportunities
Company Overview