Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together. 

Senior Manager, Cybersecurity will develop and implement information security policies, standards, and procedures to secure and protect data residing on systems. You will work directly with senior management and information security departments to implement procedures and systems for the protection, conservation, and accountability of proprietary, personal, or privileged information. You will be managing a team to deliver strategic goals and plans to ensure an effective enterprise wide intelligence plan.

You’ll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. 

Primary Responsibilities: 

• Oversee and provide cyber threat intelligence services to internal and external stakeholders
• Work closely with enterprise information security teams to ensure timely delivery of intelligence products and consumer deliverables
• Build, grow, and lead effective intelligence teams
• Mentor, train, and develop skills of the team
• Build capacity planning and cost models
• Promote awareness of threat intelligence services
• Ensure that intelligence services are clearly understood
• Drive continuous improvement of technology, processes, and procedures to align with stakeholder needs
• Coordinate intelligence with law enforcement agencies, regional security teams, and intelligence sharing partners
• Provide briefings on short and long-term threat intelligence risks
• Develop frameworks for reporting, escalation, and management of intelligence products within the enterprise
• Work collaboratively with other supporting functions across the enterprise

You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. 

Required Qualifications: 

• Undergraduate degree or 5 years of cybersecurity experience
• 7 years information security experience with focus in cybersecurity, incident response, threat intelligence, red team, or reverse engineering.
• 5 years of experience working with the following disciplines:
  • Analyzing, tracking, and reporting of common threats and malware
  • Analyzing, tracking, and reporting of advanced threat actor groups and associated TTPs
  • Using the Diamond Model for Intrusion Analysis to cluster, track, and group threat activities
  • Lockheed Martin Cyber Kill Chain to depict and analyze discreet phases of adversary operations
  • MITRE ATT&CK framework of adversary operational TTP’s
  • Identifying connections between adversary tools, infrastructure, personas, and suspected affiliations using link analysis models
  • Open and/or closed source intelligence gathering methods and processes
  • Operational and tactical intelligence analysis
  • Providing strategic intelligence analysis and executive reporting
• 3 years of experience collaborating with and managing internal and external stakeholders 
• 3 years of using industry models to assess cybersecurity risks
• 3 years of experience with intelligence requirements and RFI processes
• 3 years of reviewing, analyzing, and synthesizing open and/or closed source threat intelligence reports
• 3 years of developing operational, program metrics, and KPIs
• 3 years of experience leading, mentoring, training and developing team members.

Preferred Qualifications: 

• Security related certificates, such as: CISSP, GPEN, GCIH, GREM, GCTI
• Experience with malware analysis and reverse engineering
• Experience with security technologies such as firewalls, email inspection and sandboxing, intrusion detection and preventions systems, endpoint detection and response
• Experience with netflow data, network traffic and packet capture analysis
• Experience working with large data sets
• Experience developing intelligence reports that effectively communicate risk
• Experience developing relationships and working closely with law enforcement partners
• Deep understanding of the current threat landscape and associated risks
• Understanding of conventions and models for intelligence attribution and intrusion clustering
• Knowledge of common intrusion tactics, techniques, and countermeasures
• Threat concepts and frameworks (CVSS, CVE, MITRE ATT&CK, STIX/TAXII, YARA, FAIR)
• In-depth knowledge of threat intelligence lifecycle
• Proven ability to research and analysis
• Proven project management and project delivery
• Proven high attention to detail
• Proven problem solving
• Proven critical thinking
• Proven investigative mindset

*All employees working remotely will be required to adhere to UnitedHealth Group’s Telecommuter Policy 

California, Colorado, Connecticut, Hawaii, Nevada, New Jersey, New York, Rhode Island, or Washington Residents Only: The salary range for this role is $104,700 to $190,400 annually. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. UnitedHealth Group complies with all minimum wage laws as applicable. In addition to your salary, UnitedHealth Group offers benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with UnitedHealth Group, you’ll find a far-reaching choice of benefits and incentives.

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.

Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity/Affirmative Action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law. 

UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.