Threat Intelligence Manager

UnitedHealth Group•Tampa, FL

2h•$91,700 - $163,700•Remote

About The Position

The Threat Intelligence Manager is responsible for leading and integrating Enterprise Risk Intelligence (ERI) threat intelligence operations across both the Collection & Monitoring and Online Threat Intelligence functions. This role ensures end-to-end management of open-source intelligence (OSINT) collection, monitoring, intake, and escalation of threats directed at executives, employees, facilities, and enterprise operations. The manager provides direct leadership to analysts across both functions, establishing clear operational standards, ensuring disciplined execution of monitoring and collection activities, and maintaining consistent, high-quality outputs. This role is accountable for the ongoing development, maturation, and continuous improvement of the Threat Intelligence program, ensuring scalable capability, consistent tradecraft, and alignment with enterprise security priorities. This position is full time. Employees are required to have flexibility to work any of our 8-hour shift schedules during our normal business hours of 8:00 am - 5:00 pm. It may be necessary, given the business need, to work occasional overtime. We offer weeks of on-the-job training. The hours of the training will be based on schedule or will be discussed on your first day of employment.

Requirements

High School Diploma / GED
Must be 18 years of age OR older
6+ years of experience in intelligence, threat analysis, investigations, or security operations
2+ years of experience managing analysts or operational teams
Experience leading operational teams responsible for monitoring, investigations, or threat detection
Understanding of OSINT collection, online threat monitoring, and intelligence lifecycle processes
Familiarity with social media monitoring tools, OSINT platforms, and digital investigation practices
Familiarity with online research and monitoring platforms
People leadership skills with the ability to mentor, develop, and manage analytical teams
Ability to manage competing priorities in high-tempo environments
Written and verbal communication skills with the ability to guide clear and objective analysis
Proficiency with Microsoft Office Suite tools
Ability to work full time. Employees are required to have flexibility to work any of our 8-hour shift schedules during our normal business hours of 8:00 am - 5:00 pm. It may be necessary, given the business need, to work occasional overtime
Ability to keep all company sensitive documents secure (if applicable)
Required to have a dedicated work area established that is separated from other living areas and provides information privacy.
Must live in a location that can receive a UnitedHealth Group approved high-speed internet connection or leverage an existing high-speed internet service.
All employees working remotely will be required to adhere to UnitedHealth Group’s Telecommuter Policy

Nice To Haves

Understanding of Behavioral Threat Assessment and Management (BTAM) a plus
Familiarity of AI tools

Responsibilities

Directly manage Collection & Monitoring Analysts and Online Threat Intelligence Analysts, providing day-to-day oversight, coaching, and performance management.
Establish expectations for analytical rigor, documentation standards, and operational discipline across both functions.
Lead hiring, onboarding, training, and development to build and sustain OSINT collection and online monitoring capabilities.
Manage workload prioritization, shift alignment, and surge coverage to ensure consistent operational support across monitoring, intake, and collection activities.
Support after-hours on-call responsibilities as needed; provide senior-level oversight for incident response during major security events.
Oversee execution of OSINT research and monitoring activities supporting POI-related security inquiries.
Ensure analysts collect, organize, and maintain accurate documentation of information related to individuals of security concern.
Validate identification of concerning behaviors, escalation indicators, and targeting activity through open-source information.
Maintain structured processes for case tracking, documentation, and escalation of identified risks.
Oversee the Online Threat Intelligence function responsible for continuous monitoring of open-source and digital environments for threats directed at executives, employees, and enterprise assets.
Ensure monitoring coverage across social media platforms, forums, blogs, and other online sources to identify threats, hostile narratives, or indicators of targeting.
Oversee triage, processing, and escalation of online threat information in alignment with established procedures and criteria.
Ensure consistent documentation, logging, and intake of online threat data to support downstream analysis and threat management activities.
Ensure timely identification, triage, and escalation of threats across both collection and online monitoring functions while maintaining accountability for accuracy, completeness, and timeliness of outputs.
Provide leadership oversight during elevated threat periods or incidents, ensuring coordinated monitoring, intake, and response support – on-call support
Reinforce adherence to established procedures, documentation standards, and information handling requirements across both teams.
Lead the ongoing development and maturation of Threat Intelligence collection and monitoring programs, establishing consistent OSINT methodologies and analyst tradecraft.
Drive continuous improvement through structured reviews, feedback loops, and refinement of monitoring coverage and threat detection capabilities.