Senior Information Security Engineer

UnitedHealth Group•Eden Prairie, MN

19h•$91,700 - $163,700•Remote

About The Position

This position of Senior Information Security Engineer is for support of Data Loss Prevention (DLP) and experience with deployment of Microsoft (M365/O365) Security and Compliance capabilities. Individuals in this position will function at a senior expert level to develop and implement security tools in a 24/7/365 operations environment, ensuring the security and protection of data while formulating and implementing procedures and systems to ensure the protection, conservation, and accountability of proprietary, personal, or privileged electronic data. Provides Subject Matter Expert (SME) level support for establishing operational readiness and for ongoing data protection operations for UHG. Positions in this function are also involved in monitoring, evaluating, and maintaining systems and procedures to safeguard internal information systems, networks, databases, and Web-based security. Conduct vulnerability assessments and monitor systems, network, databases, and Web for potential performance and capability degradation. Respond to alerts from monitoring tools. Report, investigate, and resolve security incidents. Recommend and implement changes to enhance systems security and prevent unauthorized access. Research security trends, new methods, and techniques used in unauthorized access of data to preemptively minimize the possibility of system breaches. May oversee internal or external systems security (i.e., cloud services). Ensure that customers and users have the right access to the right systems at the right times. The individual will work in a leadership capacity, working directly with other departments to develop and implement information security policies, standards, and procedures. The individual will collaborate with multiple teams across multiple support tiers including desktop support, network, security, and information security teams, analyzing issues/incidents, establishing/working war rooms, diagnosing issue severity, computing problem resolution and recovery. These individuals will resolve or work with SMEs to resolve issues.

Requirements

Bachelor's degree OR 4+ years of networking experience
3+ years of experience with DLP or data protection platforms
2+ years of experience with VMWare / Powershell

Nice To Haves

General Programming/Scripting proficiency (i.e. Python, Perl, BASH, etc.)
Experience in Fortune 500 company
Mentoring/guidance capabilities
Strong planning and problem-solving skills
Strong networking and architecture experience
Ability to troubleshoot in highly complex, technical situations within a matrixed organization
Ability to identify and mitigate risks
Ability to document and communicate on an expert level
Have or be in process of obtaining advanced certifications pertinent to area of expertise
Ability to obtain and keep required (government and other) security clearances
Collaborate in the development of training content for issues related to IT Cybersecurity
5+ years providing SME level capabilities in varied enterprise level security technologies

Responsibilities

Serves in a leadership capacity, formulating and implementing procedures and systems
Serves as a senior Subject Matter Expert (SME) for data protection capabilities
Determine the severity and complexity of issues pertaining to the security and protection of data, (either alone or as part of a team), ensuring the protection, conservation, and accountability of proprietary, personal, or privileged electronic data
Develops and oversee the development of innovative approaches and solutions to complex problems and issues
Oversee the monitoring and responses to security incidents, offering expertise to ensure prompt and effective resolution
Provides analysis of and suggested solutions to complex issues, as well as complex conceptual analysis
Collaborates with directors, managers, project managers, architects, and other technical leads to ensure continuity and communication across teams
Collaborates with director, managers, and other technical personnel to ensure mitigation of risks to the company
Mentors and coaches’ cyber security individuals to provide guidance and expertise, promoting continued integration of technological advances to further enhance security