Note: The job is a remote job and is open to candidates in USA. UnitedHealth Group, through Optum, is hiring an Information Security Engineer to provide front-line security alert triage and support users with security-related issues. The role investigates and escalates incidents, resolves security and DLP events, and identifies opportunities to improve detections and workflows.
Responsibilities
- Triage Security Alerts: Monitor and analyze security alerts from various sources (SIEM, EDR, email, etc.) to determine severity and required response
- User Support & Education: Serve as the first point of contact for security-related user issues, providing guidance, troubleshooting, and education
- Incident Escalation: Escalate confirmed or high-risk incidents to senior security engineers or incident response teams with clear documentation
- Threat Analysis: Perform initial investigation and enrichment of suspicious activity to support threat detection and response
- Tool Utilization: Leverage security tools (e.g., Splunk, CrowdStrike, Microsoft Defender, etc.) to investigate and resolve issues
- Documentation: Maintain accurate records of incidents, resolutions, and user interactions in ticketing systems
- Collaboration: Work closely with IT, compliance, and other security team members to ensure consistent and effective security practices
- Process Improvement: Identify trends, recurring issues, and process gaps from ticket queue activity; partner with subject matter experts to improve detections, streamline workflows, and evaluate automation opportunities
- Leverage enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement
Skills
- Bachelor's degree in Cybersecurity, Information Technology, or Engineering related field
- 2+ years of experience in information security, IT support, or SOC environments
- 2+ years of experience with common security tools and platforms (e.g., SIEM, EDR, phishing analysis tools)
- 2+ years of experience with security fundamentals (networking, endpoint protection, identity management)
- Experience with scripting or automation (e.g., Python, PowerShell)
- Security certifications such as CompTIA Security+, SSCP, or equivalent
- Experience with Microsoft 365 security tools and cloud environments (Azure, AWS)
- Familiarity with ITIL or similar service management frameworks
- Experience with DLP Platforms (e.g. Broadcom, Zscaler, Proofpoint,)
- Understanding of data classification models and encryption standards
- Excellent communication and interpersonal skills, with a customer-first mindset
- Ability to work in a fast-paced environment and manage multiple priorities
Benefits
- Telecommute from anywhere within the U.S.
- Comprehensive benefits package (subject to eligibility requirements).
- Incentive and recognition programs (subject to eligibility requirements).
- Equity stock purchase (subject to eligibility requirements).
- 401k contribution (subject to eligibility requirements).
Company Overview