Senior Network Detection & Response Engineer - Remote-ready

Optum; Plymouth (MN); Remote; USD 92,000 - 164,000; Full time

Benefits offered by this job

Comprehensive benefits package

Equity stock purchase plan

401k contribution

Job summary

Optum is seeking a Senior Network Detection & Response Engineer to ensure the health, visibility, and performance of the enterprise NDR platform. You will design, deploy, and maintain NDR sensors and Zeek pipelines, collaborating with SOC, Incident Response, and Detection Engineering teams.

You will build platform observability using Python, REST APIs, and time-series databases, while defining SLIs/SLOs and writing operational guides. Telecommute within the U.S. is supported.

Qualifications

• 4+ years of combined experience in network engineering and/or information security, focusing on network traffic analysis and threat detection.

Responsibilities

• Design, deploy, configure, and maintain enterprise NDR sensors and Zeek-based pipelines.
• Identify and root-cause network visibility gaps using Zeek/Suricata analysis and dashboards.
• Collaborate with Network Engineering and application teams to onboard new segments into NDR.
• Build observability using Python, REST APIs, and time-series databases to monitor health and throughput.
• Modify Zeek scripts and Suricata rules in response to customer requests with Detection Engineering.
• Define SLIs/SLOs and produce operational docs for NDR administration.
• Leverage AI tools to streamline workflows and automate tasks.

Skills

Network engineering

Information security

Threat detection

Network traffic analysis

On-call incident response

Scripting (Python)

Education

Bachelor's degree

Tools

Zeek

Suricata

Corelight

ExtraHop

Darktrace

Splunk

Elastic

Job description

Optum is seeking a Senior Network Detection & Response Engineer to ensure the health, visibility, and performance of the enterprise NDR platform. You will design, deploy, and maintain NDR sensors and Zeek pipelines, collaborating with SOC, Incident Response, and Detection Engineering teams.

You will build platform observability using Python, REST APIs, and time-series databases, while defining SLIs/SLOs and writing operational guides. Telecommute within the U.S. is supported.