Principal Data Security Engineer

UnitedHealth Group•Nashville, TN

2d•$112,700 - $193,200•Remote

About The Position

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. The Principal Data Security Engineer will lead the design, deployment, integration, and operationalization of the Cloud Data Security Posture Management Platform across our partner Cloud Service Providers. The Principal Cloud Data Security Engineer will have very solid interpersonal skills, be a self-starter, and have a desire to maintain enterprise-wide visibility to initiatives related to cloud-based technologies and services. The Cloud Security Engineer is an individual contributor role with deep expertise in Cloud Security and Cloud Engineering best practices. You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week. You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Requirements

5+ years of designing data security posture management programs for cloud storage and databases
3+ years of experience with AWS Cloud, Azure Gov or other cloud environments
3+ years of experience in scripting and automation focused on cloud-based deployments utilizing languages/frameworks such as Python, Terraform, Cloudformation, etc.
3+ years of experience with container security and orchestration tools (Docker, Kubernetes, etc.)
3+ years of experience working with a wide array of operating systems (e.g. Linux, Windows, Ubuntu, etc.)
3+ years of experience with cloud databases (e.g. SQL, NoSQL, Dyanomo, etc.)

Nice To Haves

Relevant security certifications - CISSP or equivalent
Experience with DevSecOps practices and integrating security into CI/CD pipelines
Knowledge of advanced threat detection and response techniques
Familiarity and in-depth knowledge of FedRAMP and NIST security frameworks and compliance standards
Solid understanding of fundamental security principles/concepts (Networking, Encryption, IAM)
Proven outstanding written and verbal communication skills, with the ability to work collaboratively in a team environment
Proven excellent problem-solving skills, with the ability to analyze complex security issues and develop effective solutions

Responsibilities

Lead the design, deployment and integration of the DSPM and DLP tools in a Cloud environment
Design, implement and manage security controls to safeguard cloud infrastructure and data
Conduct security assessments and audits to ensure compliance with federal regulations and standards (e.g. FedRAMP, NIST)
Collaborate with cross functional teams to identify security requirements and develop solutions
Develop and maintain security documentation including policies and procedures
Stay current with emerging security threats and technologies, providing recommendations for continuous improvement
Mentor and provide guidance to junior security engineers and other team members