Remote DLP & Insider Threat Security Engineer

Optum, a UnitedHealth Group Company; Metro Manila; On-site; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Hybrid work

Laptop provided

Market total rewards

Medical plan from day 1

Dental, medical, and optical reimburse

Life and disability insurance

Paid time-off

Tuition reimbursement

EAP

Annual merit increases

Employee recognition

Training and staff development

Referral program

Volunteerism

Mandatory statutory benefits

Job summary

Optum Insight is seeking an Info Security Engineer to remotely deploy DLP across healthcare clients, develop insider threat capabilities, and drive security operations improvements. You will collaborate with Cybersecurity, Legal, HR, Compliance, and IT to monitor data movement, exfiltration risks, and insider behaviors, leveraging AI tools to streamline workflows and enhance efficiency.

The role emphasizes advanced security analytics, threat hunting, and data protection within a healthcare

Qualifications

• 2+ years of experience in cybersecurity, information security, or security operations.
• 1+ years of experience administering, configuring, or monitoring Data Loss Prevention (DLP) platforms (such as Symantec DLP, Microsoft Purview, Netskope, etc.).
• 1+ years of experience analyzing security logs, telemetry, and endpoint activity using SIEM, CASB, or User Behavior Analytics (UBA) tools.
• 1+ years of experience conducting incident investigations, digital forensics, or insider threat analysis, including the collection and preservation of digital evidence.
• Experience utilizing or evaluating automated workflows, AI-driven analytics, or scripting (e.g., Python, PowerShell) to streamline security processes and automate repetitive analyst tasks.

Responsibilities

• Manage the deployment of Data Loss Prevention (DLP) solutions across all healthcare clients and contribute to the strategic development of comprehensive insider threat program to streamline consistency.
• Monitor, analyze, and triage alerts from DLP, User and Entity Behavior Analytics (UEBA), CASB, SIEM, and endpoint security systems to identify unauthorized data movement, data exfiltration, policy violations, or abnormal user activity.
• Conduct deep-dive investigations into potential insider threats and data leakage incidents, analyzing telemetry logs, and preserving digital evidence while maintaining strict chain of custody procedures.
• Correlate information across multiple security platforms to identify malicious or negligent activity, and document detailed timelines, root causes, and recommended remediations.
• Partner closely with Cybersecurity, Legal, HR, Compliance, Privacy, and IT teams to identify suspicious behavior, coordinate sensitive investigations, and strengthen data protection controls.
• Maintain, test, and tune DLP policies, detection rules, and alert thresholds to reduce false positives, validate new use cases, and optimize controls across endpoints, email, cloud platforms, and collaboration tools.
• Analyze security telemetry, develop behavioral baselines, and participate in proactive threat-hunting activities to identify recurring behaviors, emerging insider threat risks, and client-specific operational effectiveness.
• Prepare detailed investigation reports, executive summaries, and metrics dashboards for clients; support audits, compliance reviews, and assist in creating security awareness content.
• Use enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement.
• Evaluate emerging trends to inform solution design and strategic innovation.

Skills

Cybersecurity

DLP platforms

SIEM/UBA

Incident investigations

Scripting

Tools

DLP tools

Job description

Optum Insight is seeking an Info Security Engineer to remotely deploy DLP across healthcare clients, develop insider threat capabilities, and drive security operations improvements. You will collaborate with Cybersecurity, Legal, HR, Compliance, and IT to monitor data movement, exfiltration risks, and insider behaviors, leveraging AI tools to streamline workflows and enhance efficiency.

The role emphasizes advanced security analytics, threat hunting, and data protection within a healthcare