Note: The job is a remote job and is open to candidates in USA. Optum is a global organization that delivers care aided by technology to help millions of people live healthier lives. The Principal Cybersecurity Analyst will lead the design, development, and maintenance of Splunk SOAR playbooks and custom applications, translate security operations and incident response requirements into scalable automation, and support AI-assisted analyst workflows. The role partners with Cyber Defense, SOC, and incident response teams to optimize workflows and advance intelligent cybersecurity operations.
Responsibilities
- Design, develop, and maintain Splunk SOAR playbooks, automations, and custom applications or actions to streamline cybersecurity operations
- Translate complex security operations and incident response requirements into effective, scalable, and resilient automation solutions
- Integrate SOAR workflows seamlessly with security tools, APIs, and enterprise platforms
- Design, develop, and deploy AI-powered solutions to address complex cyber defense challenges, emphasizing the responsible and ethical use of AI
- Partner with Cyber Defense, SOC, and incident response teams to proactively identify automation opportunities and optimize overall operational workflows
- Use and leverage enterprise-approved AI tools to automate repetitive tasks, optimize security workflows, and drive continuous operational improvements
- Provide senior-level technical leadership, mentoring other analysts, and contributing to automation standards, reusable frameworks, and industry best practices
- Evaluate emerging technology trends, including AI advancements, to inform solution design, security automation, and strategic innovation
Skills
- 6+ years of Python development experience
- 6+ years of Cybersecurity experience
- Hands-on experience with Splunk SOAR, including custom application and action development
- Solid experience with Python, API integrations, and automation design
- Experience with GitHub and project/work tracking tools (such as GitHub Projects)
- Working knowledge of cloud platforms (AWS, Azure, and GCP)
- Proven ability to translate ambiguous or complex requirements into scalable technical solutions
- Bachelor's degree in Cybersecurity, Computer Science, or a related technology field (or equivalent professional experience in lieu of a degree)
- Experience with Splunk Enterprise Security (ES) and Splunk Search Processing Language (SPL)
- Experience with CI/CD and source control practices for security automation content
- Experience creating reusable automation frameworks
- Experience with AI agents, LLM-integrated workflows, or AI-assisted analyst workflows
- Familiarity with AI governance concepts, including approval workflows, guardrails, and human-in-the-loop design
Benefits
- A comprehensive benefits package
- Incentive and recognition programs
- Equity stock purchase
- 401k contribution
- The flexibility to work remotely from anywhere within the U.S.
- Hybrid work in Raleigh, NC, Minneapolis, MN, or Washington, D.C.
Company Overview
Company H1B Sponsorship