Remote Principal NDR Engineer — Threat Detection Leader

UnitedHealth Group; Eden Prairie (MN); Hybrid; Confidential; Full time

Job summary

UnitedHealth Group is seeking a Principal Network Detection & Response Engineer to lead the architecture, deployment, and optimization of enterprise-wide NDR capabilities. You will analyze network telemetry, develop detection logic, and orchestrate rapid response strategies across hybrid-cloud and on-premises environments.

You will collaborate with threat intelligence, incident response, and infrastructure teams to design resilient security monitoring solutions.

Qualifications

• 5+ years of professional experience in cybersecurity engineering, network security, or intrusion detection/prevention.
• 3+ years of hands-on experience deploying, configuring, and tuning NDR or NTA platforms (e.g., Corelight, Darktrace, ExtraHop, Zeek/Bro, Suricata).
• 3+ years of experience analyzing network protocols (e.g., TCP/IP, DNS, TLS, BGP) and deep packet inspection with Wireshark, Zeek, or Suricata.
• 3+ years of experience integrating network telemetry into enterprise SIEM and SOAR (e.g., Splunk, Sentinel).

Responsibilities

• Lead the strategy, architectural design, and optimization of NDR and network security monitoring platforms across hybrid environments.
• Develop, test, and tune high-fidelity detection signatures, behavioral rules, and anomaly detection models.
• Analyze network traffic, PCAPs, flow data, and encrypted telemetry to uncover malicious activity.
• Drive automated response workflows and integration between NDR, SIEM, SOAR, and EDR platforms.
• Collaborate with Threat Hunting, Threat Intelligence, and Incident Response teams to translate TTPs into detections.
• Conduct reviews and risk assessments of network infrastructure changes to align with detection objectives.
• Mentor senior and junior security engineers with guidance on network defense and threat hunting.

Skills

Cybersecurity

Network security

Threat detection

Incident response

Mentoring

Education

CISSP

GCIA

GCIH

GNFA

CCNP Security

Tools

Corelight

Darktrace

ExtraHop

Zeek/Bro

Suricata

Wireshark

Splunk

Sentinel

Job description

UnitedHealth Group is seeking a Principal Network Detection & Response Engineer to lead the architecture, deployment, and optimization of enterprise-wide NDR capabilities. You will analyze network telemetry, develop detection logic, and orchestrate rapid response strategies across hybrid-cloud and on-premises environments.

You will collaborate with threat intelligence, incident response, and infrastructure teams to design resilient security monitoring solutions.