[Hiring] Senior Cybersecurity Analyst @UnitedHealth Group

Role Description

This role is an individual contributor for the Security Incident Response Team. As the team has developed into a 24/7 365 operation, we require strong individual contributors that will investigate, analyze and contain security incidents.

Schedule: This role is Wednesday to Saturday 8am CST to 6pm CST. If you are located in MN or DC, you will have the flexibility to work remotely* as you take on some tough challenges.

Primary Responsibilities

• Critical severity security incident management
• Monitor security intake technologies for reports of security incidents
• Perform analysis on cybersecurity alerts in both On-Premises or Cloud environments
• Provide engineering consulting and implementation expertise in support of new initiatives
• Solid ability to collaborate, delegate tasks and drive deadline compliance in a highly regulated, time sensitive environment
• Identify deficiencies in processes and tools, recommend security controls and/or corrective actions for mitigating technical and business risk
• Contribute to Lessons Learned Meetings
• Review security tools for opportunities to improve alerting for the SOC team
• Produce detailed incident reports and security recommendations
• Mentor analysts, providing training and guidance through complex incidents
• Lead security, policy and privacy related events and incidents
• Manage containment and remediation efforts of affected assets, IOCs, and TTPs
• Hold stakeholders accountable for remediation actions
• Integrate and collaborate with other subject matter experts throughout the organization
• Liaison with Cyber Defense, Privacy, Compliance, Legal, and Architecture teams
• Influence the creation and/or adoption of new standards and procedures
• On-Call duties may be required

Qualifications

• High School Diploma/GED (or higher)
• Information Technology Industry Certification: Willingness to obtain information/cybersecurity certification within nine (9) months of hire
• 6+ years of Cyber Security Analyst experience in any of the following areas:
  • Security Incident Response
  • Email Security
  • Cybersecurity threat detection, monitoring and reporting
  • Cyber Intelligence and Threat Hunting
  • Vulnerability Management
• Advanced level of experience analyzing attack vectors, current threats, and security remediation strategies
• Advanced level of experience with SIEM technologies, EDR technologies, and/or Asset isolation tools
• Intermediate level of experience in public cloud platforms, including Azure, AWS, and Google Cloud Platform
• Intermediate level of experience with high level familiarity of global privacy regulations (NY Cyber, GDPR, LGPD, CERT-In)
• Willing or ability to work off shift hours if needed (e.g. Nights and Weekends)

Preferred Qualifications

• Undergraduate degree or equivalent experience
• CISSP, CISA, GCIH, CEH, CHFI, CCSP, SEC+, Net+, A+
• PowerShell, KQL, or Python scripting experience
• Understanding of NIST 800-61, Cyber Kill Chain, and MITRE ATT&CK framework
• Networking experience (including the OSI Model, TCP/IP, DNS, HTTP, SMTP), System Administration, and Security Architecture
• Proven Spanish Language skills

Benefits

• Comprehensive benefits package
• Incentive and recognition programs
• Equity stock purchase
• 401k contribution (all benefits are subject to eligibility requirements)

Application Deadline

This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.