Principal Threat Intelligence Engineer — Remote/Hybrid

UnitedHealth-Grou; Washington (District of Columbia); Hybrid; USD 135,000 - 231,000; Full time

Job summary

UnitedHealth Group is seeking a Senior Principal Threat Intelligence Engineer to design, deploy, and integrate threat intel capabilities across its security ecosystem. The role emphasizes ingesting, normalizing, and enriching threat data and deploying automated intelligence-enabled detection and response workflows.

The ideal candidate will lead CTI, SOC, IR, and Threat Hunting collaborations, focusing on automation, data pipelines, and tool development.

Qualifications

• Experience designing and deploying threat intelligence capabilities across security tooling.
• Automation, integration, and data engineering for CTI, SOC, IR teams.
• Proficiency with threat intel platforms and security operations tooling.

Responsibilities

• Deploy and maintain threat intelligence platforms integrated with SIEM/SOAR.
• Develop automated workflows for threat detection and response.
• Ingest, normalize, and enrich indicators of compromise and threat data.
• Collaborate with CTI, SOC, IR, and other SecOps teams.

Skills

Threat intelligence

Automation

Programming

CI/CD

AI/LLMs

Tools

Splunk

Microsoft Sentinel

IBM QRadar

Elastic

Git

Docker

Kubernetes

SOAR

Job description

UnitedHealth Group is seeking a Senior Principal Threat Intelligence Engineer to design, deploy, and integrate threat intel capabilities across its security ecosystem. The role emphasizes ingesting, normalizing, and enriching threat data and deploying automated intelligence-enabled detection and response workflows.

The ideal candidate will lead CTI, SOC, IR, and Threat Hunting collaborations, focusing on automation, data pipelines, and tool development.