Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.
The Senior Information Security Engineer provides advanced operational support for cloud security technologies involving Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Data Loss Prevention (DLP) policies, including the Microsoft security stack (e.g., O365). This position operates at a senior technical level within a 24/7/365 production environment, supporting the security, availability, and integrity of enterprise systems and data.
The role is responsible for supporting the ongoing operation of cloud security platforms by partnering closely with platform owners and engineering and architectural leads. The individual contributes subject matter expertise while assisting with day to day administration, policy implementation, monitoring, troubleshooting, and continuous improvement of global web, cloud, and data protection controls. Responsibilities include supporting secure web gateway services, traffic steering and PAC file configurations, application based security policies, and cloud access enforcement mechanisms.
The Senior Information Security Engineer functions as a Subject Matter Expert (SME) for operational readiness and sustainment activities, including onboarding new cloud tenants, supporting proxy and SWG functionality, and enabling zero trust access patterns. The role provides senior level operational support for Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX), assisting platform owners with configuration validation, policy troubleshooting, performance issue analysis, and user experience monitoring.
A primary focus of this role is high volume triage and incident analysis. The individual systematically monitors alerts and events generated by security, network, and observability tools; assesses severity and potential impact; and performs detailed analysis to identify root causes, contributing factors, and remediation paths. The role plays a critical part in incident response, including investigation, documentation, escalation, coordination, and closure of security events. This includes participation in and facilitation of war room engagements, working collaboratively across Platform Support, Cyber Defense, NSIS, and network compute teams to diagnose issues and drive timely resolution and recovery.
The position is also responsible for evaluating the effectiveness of existing security controls and recommending enhancements to reduce risk, improve resilience, and prevent unauthorized access or data loss. The individual supports vulnerability identification and analysis efforts and assists in monitoring enterprise systems, networks, databases, endpoints, and web services for potential security threats or operational degradation. Continuous research into emerging threats, attack techniques, and industry trends is required to inform proactive risk mitigation and operational improvements.
This role supports enterprise security governance by contributing to the development, maintenance, and enforcement of information security policies, standards, and procedures. While not serving as the primary owner of platforms, the Senior Information Security Engineer operates in a leadership and influence capacity, providing expert guidance, mentoring, and technical recommendations to peers, partners, and stakeholders, and helping ensure that users and systems have the appropriate access at the appropriate time in alignment with least privilege and zero trust principles.
This position requires the ability to work hours aligned with team operations, typically starting at 8:00 a.m. CST, and includes participation in on call rotations as well as availability for non standard hours to support incident response and operational continuity as needed.
Primary Responsibilities:
Mentors and coaches cyber security individuals to provide guidance and expertise, promoting continued integration of technological advances to further enhance security
Required Qualifications:
Preferred Qualifications:
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.