[Hiring] Information Security Engineer @UnitedHealth Group

Role Description

We are seeking a proactive and detail-oriented Information Security Engineer with a strong focus on triage and user support. This role is critical in our front-line defense, responsible for quickly assessing security alerts, supporting end users with security-related issues, and escalating incidents as needed. The ideal candidate will have a strong technical foundation, excellent communication skills, and a passion for helping others navigate security challenges.

You will enjoy the flexibility to telecommute* from anywhere within the U.S. as you take on some tough challenges.

Primary Responsibilities:

• Triage Security Alerts: Monitor and analyze security alerts from various sources (SIEM, EDR, email, etc.) to determine severity and required response.
• User Support & Education: Serve as the first point of contact for security-related user issues, providing guidance, troubleshooting, and education.
• Incident Escalation: Escalate confirmed or high-risk incidents to senior security engineers or incident response teams with clear documentation.
• Threat Analysis: Perform initial investigation and enrichment of suspicious activity to support threat detection and response.
• Tool Utilization: Leverage security tools (e.g., Splunk, CrowdStrike, Microsoft Defender, etc.) to investigate and resolve issues.
• Documentation: Maintain accurate records of incidents, resolutions, and user interactions in ticketing systems.
• Collaboration: Work closely with IT, compliance, and other security team members to ensure consistent and effective security practices.
• Process Improvement: Identify trends, recurring issues, and process gaps from ticket queue activity; partner with subject matter experts to improve detections, streamline workflows, and evaluate automation opportunities.
• Leverage enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or Engineering related field.
• 2+ years of experience in information security, IT support, or SOC environments.
• 2+ years of experience with common security tools and platforms (e.g., SIEM, EDR, phishing analysis tools).
• 2+ years of experience with security fundamentals (networking, endpoint protection, identity management).

Requirements

• Experience with scripting or automation (e.g., Python, PowerShell).
• Security certifications such as CompTIA Security+, SSCP, or equivalent.
• Experience with Microsoft 365 security tools and cloud environments (Azure, AWS).
• Familiarity with ITIL or similar service management frameworks.
• Experience with DLP Platforms (e.g. Broadcom, Zscaler, Proofpoint).
• Understanding of data classification models and encryption standards.
• Excellent communication and interpersonal skills, with a customer-first mindset.
• Ability to work in a fast-paced environment and manage multiple priorities.

Benefits

• Comprehensive benefits package.
• Incentive and recognition programs.
• Equity stock purchase.
• 401k contribution (all benefits are subject to eligibility requirements).