Remote Senior NDR Engineer — Network Detection & Response

Optum; Plymouth (MN); Remoto; USD 92.000 - 164.000; Tempo pieno

Descrizione del lavoro

UnitedHealth Group seeks a Senior Network Detection and Response Engineer to lead operational health, visibility, and performance of the enterprise NDR platform. You will design and maintain Zeek-based pipelines and collaborate with SOC, Incident Response, and Detection Engineering teams.

You will build observability tooling with Python and REST APIs, craft detection content, and define reliability metrics. This role supports remote work options within the U.S.

Competenze

• 4+ years of combined experience in network engineering and/or information security focused on network traffic analysis, monitoring, or threat detection.
• 3+ years hands-on engineering/administration with enterprise NDR technologies (e.g., Zeek, Suricata, Corelight, ExtraHop, Darktrace).
• 3+ years hands-on experience with TCP/IP, UDP, VLANs, routing/switching, and CLI on enterprise devices (e.g., Cisco, Arista, Juniper).
• 1+ years administering Linux systems from the command line.
• Participation in on-call rotation for platform availability and incident response.

Mansioni

• Design, deploy, and maintain enterprise NDR sensors, appliances, and Zeek-based pipelines for complete, accurate SOC data delivery.
• Identify and root-cause network visibility gaps using Zeek/Suricata logs, baselines, and dashboards.
• Collaborate with Network Engineering, Packet Broker, and apps teams to validate tap/SPAN placement and onboard new segments.
• Build platform observability with Python, REST APIs, and time series DBs to monitor health and data throughput.
• Create/modify Zeek scripts and Suricata rules; coordinate with Detection Engineering on rule strategy.
• Define SLIs/SLOs, document SOPs, and provide operational guides for NDR administration.

Conoscenze

Network engineering

Security monitoring

Zeek/Suricata

Linux

On-call experience

Formazione

High School Diploma or GED

Strumenti

Corelight

Zeek

Suricata

ExtraHop

Darktrace

Descrizione del lavoro

UnitedHealth Group seeks a Senior Network Detection and Response Engineer to lead operational health, visibility, and performance of the enterprise NDR platform. You will design and maintain Zeek-based pipelines and collaborate with SOC, Incident Response, and Detection Engineering teams.

You will build observability tooling with Python and REST APIs, craft detection content, and define reliability metrics. This role supports remote work options within the U.S.