The Role
Deploys and manages DLP solutions, monitors security alerts across DLP, UEBA, CASB, SIEM, and endpoint systems, and investigates insider threats and data leakage. The role correlates telemetry, preserves digital evidence, tunes detection policies, conducts threat hunting, prepares reports and dashboards, supports audits, and partners with Cybersecurity, Legal, HR, Compliance, Privacy, and IT teams. It also evaluates automation and AI tools to improve security operations.
Summary Generated by Built In
Requisition Number: 2386592
Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.
Primary Responsibilities:
Required Qualifications:
Preferred Qualifications:
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.
Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.
Primary Responsibilities:
- Manage the deployment of Data Loss Prevention (DLP) solutions across all healthcare clients and contribute to the strategic development of comprehensive insider threat program to streamline consistency
- Monitor, analyze, and triage alerts from DLP, User and Entity Behavior Analytics (UEBA), CASB, SIEM, and endpoint security systems to identify unauthorized data movement, data exfiltration, policy violations, or abnormal user activity
- Conduct deep-dive investigations into potential insider threats and data leakage incidents, analyzing telemetry logs, and preserving digital evidence while maintaining strict chain of custody procedures
- Correlate information across multiple security platforms to identify malicious or negligent activity, and document detailed timelines, root causes, and recommended remediations
- Partner closely with Cybersecurity, Legal, HR, Compliance, Privacy, and IT teams to identify suspicious behavior, coordinate sensitive investigations, and strengthen data protection controls
- Maintain, test, and tune DLP policies, detection rules, and alert thresholds to reduce false positives, validate new use cases, and optimize controls across endpoints, email, cloud platforms, and collaboration tools
- Analyze security telemetry, develop behavioral baselines, and participate in proactive threat-hunting activities to identify recurring behaviors, emerging insider threat risks, and client-specific operational effectiveness
- Prepare detailed investigation reports, executive summaries, and metrics dashboards for clients; support audits, compliance reviews, and assist in creating security awareness content
- Use enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement
- Evaluate emerging trends to inform solution design and strategic innovation
- Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
Required Qualifications:
- 2+ years of experience in cybersecurity, information security, or security operations
- 1+ years of experience administering, configuring, or monitoring Data Loss Prevention (DLP) platforms (such as Symantec DLP, Microsoft Purview, Netskope, etc.)
- 1+ years of experience analyzing security logs, telemetry, and endpoint activity using SIEM, CASB, or User Behavior Analytics (UBA) tools
- 1+ years of experience conducting incident investigations, digital forensics, or insider threat analysis, including the collection and preservation of digital evidence
- Experience utilizing or evaluating automated workflows, AI-driven analytics, or scripting (e.g., Python, PowerShell) to streamline security processes and automate repetitive analyst tasks.
Preferred Qualifications:
- Professional security certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), GCFE, GCIH, or platform-specific DLP certifications
- Experience in the healthcare industry, with a strong understanding of healthcare regulatory frameworks such as HIPAA, HITECH, or HITRUST
- Experience developing behavioral baselines or participating in threat-hunting activities
- Experience using generative AI or machine learning tools for security-related data analysis, productivity, or alert summaries
- Knowledge of digital forensics, chain of custody procedures, and evidence collection
- Proven solid analytical and problem-solving skills, with the ability to correlate data from disparate security platforms
- Proven excellent communication and reporting skills, with experience presenting complex security issues to HR, legal, compliance, and executive leadership
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.
Skills Required
- 2+ years of experience in cybersecurity, information security, or security operations
- 1+ years of experience administering, configuring, or monitoring Data Loss Prevention platforms, such as Symantec DLP, Microsoft Purview, or Netskope
- 1+ years of experience analyzing security logs, telemetry, and endpoint activity using SIEM, CASB, or User Behavior Analytics tools
- 1+ years of experience conducting incident investigations, digital forensics, or insider threat analysis, including collection and preservation of digital evidence
- Experience utilizing or evaluating automated workflows, AI-driven analytics, or scripting such as Python or PowerShell to streamline security processes
- Professional security certifications such as CISSP, CISM, GCFE, GCIH, or platform-specific DLP certifications
- Healthcare industry experience and understanding of HIPAA, HITECH, or HITRUST
- Experience developing behavioral baselines or participating in threat-hunting activities
- Experience using generative AI or machine learning tools for security-related analysis, productivity, or alert summaries
- Knowledge of digital forensics, chain of custody procedures, and evidence collection
- Strong analytical and problem-solving skills, including correlating data from disparate security platforms
- Excellent communication and reporting skills, including presenting complex security issues to HR, Legal, Compliance, and executive leadership
Optum Compensation & Benefits Highlights
-
Parental & Family Support — Paid parental leave (six weeks), paid caregiver leave (up to two weeks), Bright Horizons back-up care, and adoption assistance up to $10,000 are prominently included. Feedback suggests these family supports meaningfully aid work-life balance and are often highlighted as strengths.
-
Retirement Support — A 401(k) with company match is available to all employees, including part-time staff, alongside other financial protections like disability and life insurance. Feedback suggests broad access and matching make retirement support a core pillar of the package.
-
Equity Value & Accessibility — An Employee Stock Purchase Plan offers discounted company stock, with some roles also eligible for sign-on or performance bonuses. Feedback suggests the ESPP is a standout financial perk that helps employees build ownership over time.
Optum Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Optum, part of the UnitedHealth Group family of businesses, is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. At Optum, we support your well-being with an understanding team, extensive benefits and rewarding opportunities. By joining us, you’ll have the resources to drive system transformation while we help you take care of your future. We recognize the power of connection to drive change, improve efficiency and make a difference in health care. Join a team where your skills and ideas can make an impact and where collaboration is key to creating technology that produces healthier outcomes.
Gallery
Optum Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Optum has three workplace models that balance the needs of the business and the responsibilities of each role. These models, core on‑site (5 days/week), hybrid (4 days/week) and telecommute or fully remote, vary by country, role and location.
Typical time on-site:
Not Specified
