Remote Threat Hunter: Detect & Dismantle Cyber Threats

UnitedHealth-Grou; Raleigh (NC); On-site; USD 92,000 - 164,000; Full time

Job summary

UnitedHealth Group is seeking a Senior Threat Hunter to proactively identify attacker tactics, develop hunt plans, and coordinate incident response. The role covers network and host forensics, malware analysis, and detection engineering within the Enterprise Information Security team.

The candidate will work remotely from anywhere in the U.S., with occasional in-office requirements for certain hubs. A strong background in cybersecurity, forensics, and threat hunting is needed to drive proactive

Qualifications

• 3 years of experience in Threat Hunting or Incident response.
• 3 years of experience with application protocols (HTTP, DNS, FTP) and networking protocols (TCP, UDP, ARP, ICMP), and be comfortable analyzing packet capture (pcap) files in tools such as Wireshark
• 3 years experience with digital forensics as applied to host-based forensics, memory forensics, network forensics, and cloud forensics
• 3 years experience with operating system internals (virtual memory, paging, etc.) and techniques employed by malware to evade detection
• Due to FISMA US Citizenship is required

Responsibilities

• Analysis of network data (packets, logs) and endpoint data (logs, malicious artifacts) in both structured and unstructured methods
• Analysis of malware (executables, scripts, etc.) to determine indicators of compromise, and create signatures for future detection of similar samples
• Creating Threat Hunting Playbooks and Use Cases to proactively identify threats affecting UHG networks
• Participate in exercises to simulate attacks and determine responsiveness of processes and procedures
• Creating a feedback loop with security control owners to help tune systems based on the results of investigations
• Acting as a high tier escalation point for security incidents to provide technical expertise to the incident response process
• Develop content within tools to detect anomalous activity (SIEM Content, Custom Signatures, etc.)
• Identify and understand new environments and tooling.
• Leverage enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement

Skills

Threat hunting

Incident response

Network analysis

Communication skills

Tools

Wireshark

pcap analysis

SIEM

Job description

UnitedHealth Group is seeking a Senior Threat Hunter to proactively identify attacker tactics, develop hunt plans, and coordinate incident response. The role covers network and host forensics, malware analysis, and detection engineering within the Enterprise Information Security team.

The candidate will work remotely from anywhere in the U.S., with occasional in-office requirements for certain hubs. A strong background in cybersecurity, forensics, and threat hunting is needed to drive proactive