Senior Information Security Engineering Consultant – Python, SOAR, SIEM, IDS/IPS

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together.

Primary Responsibilities:

• Will be working on security incident response processes and methodologies
• Involved in building playbooks and workflows for incident response and security automation
• Ability to perform root cause analysis and develop preventive measures based on incident findings
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:

• Technical Skills:
  • Proficiency in Python programming language and related frameworks
  • Solid understanding of security incident response processes, methodologies, and best practices
  • Hands-on experience with SOAR platforms such as Chronicle Secops, Phantom
  • Knowledge of security automation and orchestration concepts, tools, and techniques
  • Familiarity with security technologies and frameworks such as SIEM, IDS/IPS, vulnerability management, threat intelligence, and endpoint security
  • Experience in building playbooks and workflows for incident response and security automation
  • Understanding of RESTful APIs and ability to integrate various security tools and applications
  • Knowledge of cloud security principles, practices, and tools specific to Microsoft Azure and GCP
• Incident Response Expertise:
  • Proven track record in incident response management, including triage, analysis, containment, eradication, and recovery
  • Understanding of incident response frameworks such as NIST, SANS, or ISO 27035
  • Ability to perform root cause analysis and develop preventive measures based on incident findings
• Communication and Collaboration:
  • Solid interpersonal and communication skills to effectively collaborate with cross-functional teams, including security analysts, engineers, and management
  • Ability to translate technical concepts to non-technical stakeholders
  • Experience working in an Agile or DevOps environment and collaborating with developers, operations, and security teams
• Cloud Security:
• Knowledge of cloud security principles, including identity and access management, network security, data protection, and compliance
• Hands-on experience with cloud security services and features in Microsoft Azure and GCP
• Understanding of cloud-native security tools, such as Azure Security Center, Azure Sentinel, Microsoft Defender, Google Cloud Security Command Center, and Cloud Identity and Access Management

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.