Sr Manager Cybersecurity - Remote or Hybrid in MN or DC

UnitedHealth Group•Eden Prairie, MN

7h•$112,700 - $193,200•Hybrid

About The Position

Optum Insight is improving the flow of health data and information to create a more connected system. We remove friction and drive alignment between care providers and payers, and ultimately consumers. Our deep expertise in the industry and innovative technology empower us to help organizations reduce costs while improving risk management, quality and revenue growth. Ready to help us deliver results that improve lives? Join us to start Caring. Connecting. Growing together. The Senior Manager of Cyber Defense and Security Operations provides strategic and operational leadership for the organization’s Security Engineering, Cloud Security, and Detection Engineering programs. This role is responsible for designing, implementing, and maintaining enterprise security technologies while driving engineering excellence, automation, and continuous improvement across a shared services healthcare cybersecurity environment. As a key leader within the Cyber Defense leadership team, this individual serves as the delegated operational leader during planned and unplanned leadership absences, providing leadership during major cybersecurity incidents and ensuring continuous protection of critical healthcare infrastructure. As an innovative leader, you will not only secure technologies but also actively coordinate the design, build, and deployment of AI-driven automations to optimize security workflows, streamline operations, and drive continuous efficiency. This is an extraordinary opportunity to work at the intersection of cybersecurity, healthcare innovation, and artificial intelligence, leading a team dedicated to securing the future of health technology. You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field OR equivalent operational cybersecurity experience in lieu of a degree
5+ years of progressive cybersecurity experience, including enterprise security engineering and technical security operations
2+ years of experience in a leadership, management, or technical team lead role, mentoring and developing security professionals
2+ years of experience managing security controls and policies
1+ years of experience serving as a leader or technical lead during cybersecurity incidents

Nice To Haves

Industry cybersecurity certifications such as CISSP, CISM, CCSP, GIAC (GCIH, GCFA), or HITRUST CSF Practitioner
Demonstrated experience developing detection engineering programs aligned with MITRE ATT&CK frameworks, Detection-as-Code, and automated threat hunting
Practical experience utilizing approved AI tools and automated solutions to augment threat analysis, streamline engineering tasks, and accelerate operational workflows
Deep working knowledge of healthcare regulatory and compliance frameworks, including HIPAA, HITECH, NIST CSF, CIS Controls, and HITRUST
Proven track record of managing security engineering operations within a shared services healthcare environment or highly regulated industry

Responsibilities

Provide strategic and operational leadership for Security Engineering, Cloud Security, and Detection Engineering programs, aligning cybersecurity initiatives with organizational objectives, risk management priorities, and regulatory requirements
Lead, mentor, and develop a high-performing cybersecurity analysts, engineers and technical specialists focused on accountability, collaboration, and innovation
Direct the design, implementation, administration, and lifecycle management of enterprise security technologies, including endpoint protection, identity security, e-mail security, and Zero Trust architectures
Establish repeatable deployment frameworks, standard architectures, configuration baselines, and automate operational runbooks to ensure continuous monitoring and prevent policy and configuration drift
Drive cloud security strategy and lead operational security controls across Microsoft Azure, Microsoft 365, AWS, and multi-cloud environments, embedding secure architecture and posture management throughout the technology lifecycle
Oversee the development of enterprise detection capabilities, SIEM content, detection tuning, Detection-as-Code, and MITRE ATT&CK alignment to enhance coverage and reduce false positives
Serve as Incident Commander or Deputy Incident Commander during major cybersecurity incidents, directing technical resources and providing executive-level situational awareness
Serve as delegated operational leader for Cyber Defense during leadership absences, representing Cyber Defense in executive committees, governance sessions, and strategic planning
Leverage enterprise-approved AI tools to streamline workflows, automate technical tasks, evaluate emerging technology trends, and drive continuous operational improvement
Establish engineering governance, operational metrics (KPIs/KRIs), and standards supporting HIPAA, HITECH, NIST Cybersecurity Framework, CIS Controls, and HITRUST compliance requirements