Apply on Employer Site

UnitedHealth Group · 1 day ago

Sr Cyber Incident Response Analyst- Remote or Onsite in MN or DC

Eden Prairie, MN

Full-time

Onsite

Mid, Senior Level

$92K/yr - $164K/yr

4+ years exp

UnitedHealth Group is a global organization that delivers care aided by technology to help millions of people live healthier lives. This role is an individual contributor for the Security Incident Response Team, responsible for investigating, analyzing, and containing security incidents while collaborating with various stakeholders.

Health CareHospitalMedicalWellness

No H1B

U.S. Citizen Only

Responsibilities

Critical severity security incident management

Monitor security intake technologies for reports of security incidents

Perform analysis on cybersecurity alerts in both On-Premises or Cloud environments

Provide engineering consulting and implementation expertise in support of new initiatives

Solid ability to collaborate, delegate tasks and drive deadline compliance in a highly regulated, time sensitive environment

Identify deficiencies in processes and tools, recommend security controls and/or corrective actions for mitigating technical and business risk. Contribute to Lessons Learned Meetings

Review security tools for opportunities to improve alerting for the SOC team

Produce detailed incident reports and security recommendations

Mentor analysts, providing training and guidance through complex incidents

Lead security, policy and privacy related events and incidents

Manage containment and remediation efforts of affected assets, IOCs, and TTPs

Produce detailed incident reports and security recommendations

Hold stakeholders accountable for remediation actions

Providing training and guidance through complex incidents

Integrate and collaborate with other subject matter experts throughout the organization

Liaison with Cyber Defense, Privacy, Compliance, Legal, and Architecture teams

Influence the creation and/or adoption of new standards and procedures

On-Call duties may be required

Qualification

Cyber Security AnalystSecurity Incident ResponseSIEM technologiesPublic cloud platformsCyber IntelligenceVulnerability ManagementInformation Technology CertificationPowerShellPythonNetworking experienceSystem AdministrationSecurity ArchitectureSpanish Language

Required

Information Technology Industry Certification: Willingness to obtain information/cybersecurity certification within nine (9) months of hire

4+ years of Cyber Security Analyst experience in any of the following areas: Security Incident Response, Email Security, Cybersecurity threat detection, monitoring and reporting, Cyber Intelligence and Threat Hunting, Vulnerability Management

Experience analyzing attack vectors, current threats, and security remediation strategies

Experience with SIEM technologies, EDR technologies, and/or Asset isolation tools

Experience in public cloud platforms, including Azure, AWS, and Google Cloud Platform

High level familiarity of global privacy regulations (NY Cyber, GDPR, LGPD, CERT-In)

Demonstrated ability to obtain NAC clearance

Willing or ability to work off shift hours if needed (e.g. Nights and Weekends)