Principal Information Security Engineer

UnitedHealth Group•Eden Prairie, MN

4d•$112,700 - $193,200•Remote

About The Position

Optum is seeking a Principal Information Security Engineer to serve as a subject matter expert for Palo Alto Networks firewalls and firewall policies. The position makes critical decisions about enterprise security policies, evaluates secure solutions against approved architectures and standards, and develops and directs security standards and best practices. The role also consults on project security design and information management, promotes technology advances that enhance security, and addresses complex security challenges across specialized architecture areas. The engineer monitors and reports on compliance, supports audits, recommends and implements corrective actions, and determines the severity and complexity of issues involving the protection of systems and data. The role collaborates with technical personnel and organizational leaders to mitigate security risks, guides incident and issue response, and serves in a supervisory capacity by providing direction and ensuring procedures and systems are implemented. The position may be performed remotely from anywhere within the United States, subject to UnitedHealth Group’s Telecommuter Policy.

Requirements

Associate’s degree.
7+ years of experience with Palo Alto Firewall.
5+ years of Cloud Security experience.
5+ years of Security Architect experience.
5+ years of Firewall rule/policy compliance and governance experience.
5+ years of communication skills with team and customer engagement.
Team player.

Nice To Haves

5+ years of Firewall rule analysis and remediation experience.
Splunk experience.
AlgoSec experience.
Leadership skills.
Basic coding capabilities.

Responsibilities

Serve as the functional subject matter expert for Palo Alto Networks firewalls and firewall policies.
Make critical decisions on enterprise security policies.
Use security monitoring tools, such as AlgoSec and Firemon, to support audits.
Report and review compliance status and take remediation actions.
Determine the severity and complexity of issues involving the security and protection of systems data, ensuring the protection, conservation, and accountability of proprietary, personal, or privileged electronic data.
Collaborate with directors, managers, and technical personnel to mitigate company security risks.
Evaluate and develop secure solutions based on approved security architectures and standards.
Promote integration of technological advances to enhance security and reduce risks.
Consult on projects concerning secure design standards and security information management.
Develop and direct implementation of organizational security standards and best practices.
Evaluate suggested solutions and innovative approaches to complex issues, conduct complex conceptual analysis, and ensure implementation.
Plan, conduct, and respond to internal and external cybersecurity audits and questionnaires; interpret and document audit results; recommend and implement corrective actions.
Provide cyber security analysts and architects with guidance and expertise in incident and issue response and resolution methodology.
Define, implement, audit, and maintain firewall security policies.
Promote innovative approaches and solutions to complex problems and issues.
Work on highly complex projects and tasks requiring in-depth knowledge of specialized architecture areas such as security, applications, information, solution, and business.
Serve in a supervisory capacity, provide lead direction, and ensure the formulation and implementation of procedures and systems.