Principal Cybersecurity Analyst (Attack Surface Mgt.) On Site MN

UnitedHealth Group; Columbia (MD); Remote; USD 113,000 - 193,000; Full time

Job summary

UnitedHealth Group is seeking a Principal Cybersecurity Analyst (Attack Surface Management) to lead the ASM program across multi-cloud and on-prem environments. The role involves mapping assets, assessing exposures, and driving automated remediation workflows in collaboration with Threat Intelligence, Vulnerability Management, and engineering teams.

You will work primarily remote within the United States, with in-office requirements for Minneapolis or Washington, D.C.

Qualifications

• 5+ years of experience in cybersecurity, information security, or security operations.
• 5+ years of dedicated ASM/external exposure monitoring, vulnerability assessment, or threat intelligence.
• 3+ years of experience in major public cloud platforms (AWS, Azure, GCP).
• 3+ years hands-on with ASM/threat exposure platforms (e.g., Cortex Xpanse, Censys, Tenable, Qualys, Shodan).
• Experience in cyber threat intelligence or an investigatory role.

Responsibilities

• Lead the ASM program's expansion and daily execution across multi-cloud and on-prem environments.
• Discov ery, validate, and analyze risk of public-facing infra, cloud, domains, APIs, and dependencies.
• Partner with Threat Intelligence, Vulnerability Management, and Red Team operations to prioritize remediation.
• Design and deploy automated discovery, scanning, and notification pipelines.
• Use AI tools to streamline workflows and automate security tasks.

Skills

Cybersecurity experience

ASM experience

Cloud platforms

Threat intelligence

Communication

Education

Bachelor's degree

Tools

Cortex Xpanse

Censys

Tenable

Qualys

Shodan

Job description

Improve the lives of others while Caring. Connecting. Growing together.

Job Description - Principal Cybersecurity Analyst (Attack Surface Mgt.) On Site MN (2397429)

Principal Cybersecurity Analyst (Attack Surface Mgt.) On Site MN - 2397429

Explore opportunities with the Enterprise Information Security (EIS) team at UnitedHealth Group. Join one of the world's largest health care companies and become part of the first line of defense against security threats. We are focused on strengthening our cyber defenses, ransomware resiliency, vulnerability mitigation, and securing all aspects of our systems and data globally. We are passionate about protecting the sensitive data of our members and providers. We are committed to leveraging every tool, partnership and process needed to enhance our security posture. It is our duty to protect the information of those we serve whileCaring. Connecting. Growing together.

The Enterprise Information Security (EIS) teamis responsible forcybersecurity across our organization. We support our business and members by reducing risk, rapidly responding to threats, focusing on businessresiliencyand securing new acquisitions.

As a Principal Cybersecurity Analyst on the Attack Surface Management (ASM) team within Optum Technology's Enterprise Information Security organization, you will provide senior technical leadership to protect our global enterprise against emerging digital threats. In this role, you will lead the identification, mapping, assessment, and exposure management of external and internal digital assets across complex multi-cloud and on-premises environments. You will partner across cyber defense, threat intelligence, vulnerability management, and engineering teams to illuminate security blind spots, evaluate risk vectors, and design automated reconnaissance and remediation workflows. By integrating modern, enterprise-approved AI tools and intelligent automation into daily operations, you will drive operational efficiency and elevate the proactive cyber resilience of healthcare platforms trusted by millions.

You’ll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Primary Responsibilities:

• Lead the strategic expansion and daily execution of the enterprise Attack Surface Management (ASM) program, establishing comprehensive visibility of external and internal digital assets across multi-cloud and on-premises environments
• Perform continuous discovery, validation, and risk analysis of public-facing infrastructure, cloud environments, domains, APIs, and third-party dependencies to pinpoint vulnerabilities and misconfigurations
• Partner closely with Threat Intelligence, Vulnerability Management, and Red Team operations to correlate exposure data with active threats and prioritize remediation efforts
• Design, build, and deploy automated discovery, scanning, and notification pipelines to accelerate time-to-detection and exposure remediation
• Use enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement across vulnerability assessment and attack surface analysis
• Evaluate emerging trends to inform solution design, security architecture, and strategic innovation across attack surface management
• Collaborate with cloud engineering, DevOps, and IT application owners to ensure proactive remediation and embed security controls into continuous deployment pipelines
• Perform QA/QC of team member tickets and tasks to ensure operational quality, while mentoring and guiding junior and mid-level analysts
• Identify and implement continuous process and cross-functional collaboration improvements
• Maintain the team documentation library, standard operating procedures, and technical playbooks
• Enhance vendor relationships and support to optimize tooling effectiveness and service delivery

You’llbe rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well asprovidedevelopment for other roles you may be interested in.

Required Qualifications:

• 5+ years of experience in cybersecurity, information security, or security operations
• 5+ years of dedicated experience in attack surface management (ASM), external exposure monitoring, vulnerability assessment, or threat intelligence
• 3+ years of experience assessing asset configurations and security postures across major public cloud platforms (e.g., AWS, Azure, GCP)
• 3+ years of hands-on experience utilizing enterprise ASM, threat exposure, or vulnerability discovery platforms (e.g., Cortex Xpanse, Censys, Tenable, Qualys, or Shodan
• Experience in cyber threat intelligence and/or an investigatory role
• Proven solid communication and writing abilities (technical, analytical, and business)
• Available to support daily operations as well as (on an ad-hoc basis) off-hour war room efforts

Preferred Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent practical experience)
• Experience developing scripts (e.g., Python, Bash, or PowerShell) and leveraging REST APIs for automated data collection, alerting, and workflow integration
• Industry-recognized cybersecurity certifications (e.g., CISSP, CISM, CEH, OSCP, or GIAC certifications such as GCIH, GPEN)
• Cloud security certifications (e.g., AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate)
• Experience leveraging approved AI productivity and data analysis tools to augment security evaluations, synthesize threat data, or automate routine tasks
• Solid understanding of cybersecurity frameworks and taxonomies (e.g., MITRE ATT&CK, NIST CSF, OWASP Top 10, CIS Critical Security Controls)
• Experience operating within large-scale, distributed enterprise environments subject to healthcare regulations (e.g., HIPAA, HITRUST) or financial industry standards

*All employees working remotely will be required to adhere to UnitedHealth Group’s Telecommuter Policy.

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you’ll find a far-reaching choice of benefits and incentives. The salary for this role will range from $112,700 - $193,200 annually based on full-time employment. We comply with all minimum wage laws as applicable.

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

At UnitedHealth Group, our mission is to help people live healthier lives and help make the health system work better for everyone. Together, we are shaping the future of healthcare by harnessing technology and innovation to make care simpler to navigate, more affordable and more connected for the people we serve. We are committed to creating an inclusive workplace where everyone feels welcomed, valued, heard and respected, empowering people to bring their authentic selves to work and strengthening our collective impact through diverse talents, backgrounds, experiences and perspectives.

UnitedHealth Group and its affiliated brands are an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

UnitedHealth Group and its affiliated brands are a drug‑free workplace. Candidates are required to pass a drug test before beginning employment.

UnitedHealth Group is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need special assistance or accommodation for any part of the application process, please call 1-866-566-8715 to be connected to Recruitment Services. Recruitment Services hours of operation are 7 a.m. to 7 p.m. CT, Monday through Friday.

UnitedHealth Group is a registered service mark of UnitedHealth Group, Inc. The UnitedHealth Group name with the dimensional logo, as well as the dimensional logo alone, are both service marks for the UnitedHealth Group, Inc.

Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity/Affirmative Action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.

UnitedHealth Group is a drug‑free workplace. Candidates are required to pass a drug test before beginning employment.