Principal Cybersecurity Automation Engineer (Splunk SOAR)

UnitedHealth Group

Raleigh (NC)

Hybrid

USD 113,000 - 193,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Comprehensive benefits package

Equity stock purchase plan

401k contribution

Job summary

UnitedHealth Group is seeking a Principal Cybersecurity Analyst to lead design, development, and maintenance of Splunk SOAR playbooks and AI-driven security automation. You will collaborate with Cyber Defense, SOC, and incident response teams to drive scalable, reliable automations across enterprise platforms.

The role requires 6+ years in Python and cybersecurity, with hands-on Splunk SOAR expertise and cloud experience (AWS/Azure/GCP).

Qualifications

6+ years of Python development experience.
6+ years of Cybersecurity experience.
Hands-on experience with Splunk SOAR, including custom application and action development.
Solid experience with Python, API integrations, and automation design.
Experience with GitHub and project/work tracking tools (such as GitHub Projects).
Working knowledge of cloud platforms (AWS, Azure, and GCP).
Proven ability to translate ambiguous or complex requirements into scalable technical solutions.

Responsibilities

Design, develop, and maintain Splunk SOAR playbooks, automations, and custom applications or actions to streamline cybersecurity operations.
Translate complex security operations and incident response requirements into effective, scalable, and resilient automation solutions.
Integrate SOAR workflows seamlessly with security tools, APIs, and enterprise platforms.
Design, develop, and deploy AI-powered solutions to address complex cyber defense challenges, emphasizing the responsible and ethical use of AI.
Partner with Cyber Defense, SOC, and incident response teams to proactively identify automation opportunities and optimize overall operational workflows.
Use and leverage enterprise-approved AI tools to automate repetitive tasks, optimize security workflows, and drive continuous operational improvements.
Provide senior-level technical leadership, mentoring other analysts, and contributing to automation standards, reusable frameworks, and industry best practices.
Evaluate emerging technology trends, including AI advancements, to inform solution design, security automation, and strategic innovation.