Principal Threat Surface Analyst - Remote Or Hybrid In MN Or DC - Remote Eligible

Cybersecurity Engineer

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

The Enterprise Information Security (EIS) team is responsible for cybersecurity across our organization. We support our business and members by reducing risk, rapidly responding to threats, focusing on business resiliency and securing new acquisitions.

You'll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Primary Responsibilities:

• Endpoint Security Engineering
• Attack Surface Management & Exposure Reduction
• Engineering & Automation
• Collaboration & Guidance

Required Qualifications:

• 7+ years of experience in cybersecurity, security engineering, or a related field
• 3+ years of hands-on experience implementing and supporting EDR and antivirus solutions
• 3+ years of experience securing endpoints across enterprise environments (Windows, macOS, Linux)
• Experience partnering with cross-functional teams to remediate security risks

Preferred Qualifications:

• 2+ years of scripting or automation experience (PowerShell, Python, REST APIs)
• Experience implementing and supporting enterprise endpoint platforms such as: Microsoft Defender for Endpoint, Trend Micro, CrowdStrike, SentinelOne, Carbon Black
• Experience with attack surface management, vulnerability scanning, or exposure monitoring tools (e.g., Tenable, Shodan, dark web monitoring solutions)
• Demonstrated familiarity with email security platforms and SMTP migrations (e.g., Proofpoint)
• Experience integrating security tools with SIEM/SOAR platforms

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). The salary for this role will range from $112,700 to $193,200 annually based on full-time employment. We comply with all minimum wage laws as applicable.

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.