Senior Attack Surface Lead - Hybrid (MN/Remote)

UnitedHealth Group; Columbia (MD); Remote; USD 113,000 - 193,000; Full time

Job summary

UnitedHealth Group is seeking a Principal Cybersecurity Analyst (Attack Surface Management) to lead the ASM program across multi-cloud and on-prem environments. The role involves mapping assets, assessing exposures, and driving automated remediation workflows in collaboration with Threat Intelligence, Vulnerability Management, and engineering teams.

You will work primarily remote within the United States, with in-office requirements for Minneapolis or Washington, D.C.

Qualifications

• 5+ years of experience in cybersecurity, information security, or security operations.
• 5+ years of dedicated ASM/external exposure monitoring, vulnerability assessment, or threat intelligence.
• 3+ years of experience in major public cloud platforms (AWS, Azure, GCP).
• 3+ years hands-on with ASM/threat exposure platforms (e.g., Cortex Xpanse, Censys, Tenable, Qualys, Shodan).
• Experience in cyber threat intelligence or an investigatory role.

Responsibilities

• Lead the ASM program's expansion and daily execution across multi-cloud and on-prem environments.
• Discov ery, validate, and analyze risk of public-facing infra, cloud, domains, APIs, and dependencies.
• Partner with Threat Intelligence, Vulnerability Management, and Red Team operations to prioritize remediation.
• Design and deploy automated discovery, scanning, and notification pipelines.
• Use AI tools to streamline workflows and automate security tasks.

Skills

Cybersecurity experience

ASM experience

Cloud platforms

Threat intelligence

Communication

Education

Bachelor's degree

Tools

Cortex Xpanse

Censys

Tenable

Qualys

Shodan

Job description

UnitedHealth Group is seeking a Principal Cybersecurity Analyst (Attack Surface Management) to lead the ASM program across multi-cloud and on-prem environments. The role involves mapping assets, assessing exposures, and driving automated remediation workflows in collaboration with Threat Intelligence, Vulnerability Management, and engineering teams.

You will work primarily remote within the United States, with in-office requirements for Minneapolis or Washington, D.C.