Prin Cybersecurity Analyst - Hybrid in Minneapolis MN, Raleigh NC, DC or Remote

UnitedHealth Group•Raleigh, NC

3d•$112,700 - $193,200•Hybrid

About The Position

Join our team as a Principal Cybersecurity Analyst on the Optum Technology Cyber Defense team based in Minneapolis MN, Raleigh NC, DC (or remote). In this senior role, you will be at the forefront of security automation and innovation. You will lead the design, development, and maintenance of Splunk SOAR playbooks and custom applications, translating complex security operations and incident response requirements into robust, scalable automation solutions. Partnering closely with Cyber Defense, SOC, and incident response teams, you will identify high-impact automation opportunities and streamline critical workflows. By leveraging enterprise-approved AI tools, you will support AI-assisted analyst workflows, driving operational productivity and bringing advanced efficiency to our defensive capabilities. Join us and shape the future of intelligent cybersecurity operations. You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week. Hybrid in Raleigh NC, Minneapolis MN, DC or Remote.

Requirements

6+ years of Python development experience
6+ years of Cybersecurity experience
Hands-on experience with Splunk SOAR, including custom application and action development
Solid experience with Python, API integrations, and automation design
Experience with GitHub and project/work tracking tools (such as GitHub Projects)
Working knowledge of cloud platforms (AWS, Azure, and GCP)
Proven ability to translate ambiguous or complex requirements into scalable technical solutions

Nice To Haves

Bachelor's degree in Cybersecurity, Computer Science, or a related technology field (or equivalent professional experience in lieu of a degree)
Experience with Splunk Enterprise Security (ES) and Splunk Search Processing Language (SPL)
Experience with CI/CD and source control practices for security automation content
Experience creating reusable automation frameworks
Experience with AI agents, LLM-integrated workflows, or AI-assisted analyst workflows
Familiarity with AI governance concepts, including approval workflows, guardrails, and human-in-the-loop design

Responsibilities

Design, develop, and maintain Splunk SOAR playbooks, automations, and custom applications or actions to streamline cybersecurity operations
Translate complex security operations and incident response requirements into effective, scalable, and resilient automation solutions
Integrate SOAR workflows seamlessly with security tools, APIs, and enterprise platforms
Design, develop, and deploy AI-powered solutions to address complex cyber defense challenges, emphasizing the responsible and ethical use of AI
Partner with Cyber Defense, SOC, and incident response teams to proactively identify automation opportunities and optimize overall operational workflows
Use and leverage enterprise-approved AI tools to automate repetitive tasks, optimize security workflows, and drive continuous operational improvements
Provide senior-level technical leadership, mentoring other analysts, and contributing to automation standards, reusable frameworks, and industry best practices
Evaluate emerging technology trends, including AI advancements, to inform solution design, security automation, and strategic innovation