This job has closed.

UnitedHealth Group · 6 days ago

Cybersecurity Incident Response Analyst- Remote or onsite in MN or DC

Eden Prairie, MN

Full-time

Onsite

Entry, Mid Level

$73K/yr - $130K/yr

2+ years exp

UnitedHealth Group is a global organization focused on delivering care through technology. The Cybersecurity Incident Response Analyst will investigate, analyze, and contain security incidents in a 24/7 operation, ensuring compliance and collaboration across teams.

Health CareHospitalMedicalWellness

Responsibilities

Solid ability to collaborate, delegate tasks and drive deadline compliance in a highly regulated, time sensitive environment

Identify deficiencies in processes and tools, recommend security controls and/or corrective actions for mitigating technical and business risk. Contribute to Lessons Learned Meetings

Triage, escalation, and assisting the response of cybersecurity, policy and privacy related events and incidents

Manage containment and remediation efforts of affected assets, IOCs, and TTPs

Produce detailed incident reports and security recommendations

Hold stakeholders accountable for remediation actions

Providing training and guidance through complex incidents

Integrate and collaborate with other subject matter experts throughout the organization

Liaison with Cyber Defense, Privacy, Compliance, Legal, and Architecture teams

Influence the creation and/or adoption of new standards and procedures

Monitor security intake technologies for reports of security incidents

On-Call duties may be required

Qualification

Cyber Security AnalystIncident ResponseCybersecurity threat detectionSIEM technologiesPython scriptingNIST 800-61CISSPSpanish Language skillsCollaborationCommunication

Required

Information Technology Industry Certification: Willingness to obtain information/cybersecurity certification within nine (9) months of hire

2+ years of Cyber Security Analyst experience in any of the following areas: Incident Response, Email Security, Cybersecurity threat detection, monitoring and reporting, Cyber Intelligence and Threat Hunting, Vulnerability Management

Experience analyzing attack vectors, current threats, and security remediation strategies

Experience with SIEM technologies, EDR technologies, and/or Asset isolation tools

Demonstrated ability to obtain NAC clearance

Willing or ability to work off shift hours if needed (e.g. Nights and Weekends)