Sr Manager Cybersecurity - Remote or Hybrid in MN or DC

Optum; Eden Prairie (MN); On-site; USD 113,000 - 193,000; Full time

Job summary

Optum Insight is seeking a Senior Manager of Cyber Defense and Security Operations to provide strategic leadership for Security Engineering, Cloud Security, and Detection Engineering programs, designing, implementing, and maintaining enterprise security technologies while driving automation and continuous improvement.

You will lead incident response, coordinate AI-driven automations, and ensure HIPAA/NIST/CIS controls compliance across multi-cloud environments, reporting to executive leadership.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Engineering or equivalent cybersecurity experience
• 5+ years of cybersecurity experience including enterprise security engineering
• 2+ years in leadership/mentoring security professionals
• 2+ years managing security controls and policies
• 1+ year as leader/technical lead during cybersecurity incidents

Responsibilities

• Provide strategic and operational leadership for Security Engineering, Cloud Security, and Detection Engineering programs
• Lead, mentor, and develop cybersecurity analysts and engineers
• Direct design, implementation, administration, and lifecycle management of enterprise security technologies
• Establish repeatable deployment frameworks and automate runbooks
• Drive cloud security strategy across Azure, M365, AWS and multi-clouds
• Oversee development of SIEM content, MITRE ATT&CK alignment, and Detection-as-Code
• Serve as Incident Commander or Deputy during major cybersecurity incidents
• Represent Cyber Defense in executive committees and strategic planning
• Leverage AI tools to streamline workflows and automate tasks
• Establish governance, KPIs/KRIs, and compliance with HIPAA, HITECH, NIST CSF, CIS Controls, HITRUST

Skills

Security leadership

Cybersecurity

Cloud security

Incident response

Automation

Education

Bachelor's degree

Tools

SIEM

MITRE ATT&CK

Azure

M365

Job description

Optum Insight is improving the flow of health data and information to create a more connected system. We remove friction and drive alignment between care providers and payers, and ultimately consumers. Our deep expertise in the industry and innovative technology empower us to help organizations reduce costs while improving risk management, quality and revenue growth. Ready to help us deliver results that improve lives? Join us to start Caring. Connecting. Growing together.
The Senior Manager of Cyber Defense and Security Operations provides strategic and operational leadership for the organization's Security Engineering, Cloud Security, and Detection Engineering programs. This role is responsible for designing, implementing, and maintaining enterprise security technologies while driving engineering excellence, automation, and continuous improvement across a shared services healthcare cybersecurity environment. As a key leader within the Cyber Defense leadership team, this individual serves as the delegated operational leader during planned and unplanned leadership absences, providing leadership during major cybersecurity incidents and ensuring continuous protection of critical healthcare infrastructure. As an innovative leader, you will not only secure technologies but also actively coordinate the design, build, and deployment of AI-driven automations to optimize security workflows, streamline operations, and drive continuous efficiency. This is an extraordinary opportunity to work at the intersection of cybersecurity, healthcare innovation, and artificial intelligence, leading a team dedicated to securing the future of health technology.
You'll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Primary Responsibilities

• Provide strategic and operational leadership for Security Engineering, Cloud Security, and Detection Engineering programs, aligning cybersecurity initiatives with organizational objectives, risk management priorities, and regulatory requirements
• Lead, mentor, and develop a high-performing cybersecurity analysts, engineers and technical specialists focused on accountability, collaboration, and innovation
• Direct the design, implementation, administration, and lifecycle management of enterprise security technologies, including endpoint protection, identity security, e-mail security, and Zero Trust architectures
• Establish repeatable deployment frameworks, standard architectures, configuration baselines, and automate operational runbooks to ensure continuous monitoring and prevent policy and configuration drift
• Drive cloud security strategy and lead operational security controls across Microsoft Azure, Microsoft 365, AWS, and multi-cloud environments, embedding secure architecture and posture management throughout the technology lifecycle
• Oversee the development of enterprise detection capabilities, SIEM content, detection tuning, Detection-as-Code, and MITRE ATT&CK alignment to enhance coverage and reduce false positives
• Serve as Incident Commander or Deputy Incident Commander during major cybersecurity incidents, directing technical resources and providing executive-level situational awareness
• Serve as delegated operational leader for Cyber Defense during leadership absences, representing Cyber Defense in executive committees, governance sessions, and strategic planning
• Leverage enterprise-approved AI tools to streamline workflows, automate technical tasks, evaluate emerging technology trends, and drive continuous operational improvement
• Establish engineering governance, operational metrics (KPIs/KRIs), and standards supporting HIPAA, HITECH, NIST Cybersecurity Framework, CIS Controls, and HITRUST compliance requirements

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field OR equivalent operational cybersecurity experience in lieu of a degree
• 5+ years of progressive cybersecurity experience, including enterprise security engineering and technical security operations
• 2+ years of experience in a leadership, management, or technical team lead role, mentoring and developing security professionals
• 2+ years of experience managing security controls and policies
• 1+ years of experience serving as a leader or technical lead during cybersecurity incidents

Preferred Qualifications

• Industry cybersecurity certifications such as CISSP, CISM, CCSP, GIAC (GCIH, GCFA), or HITRUST CSF Practitioner
• Demonstrated experience developing detection engineering programs aligned with MITRE ATT&CK frameworks, Detection-as-Code, and automated threat hunting
• Practical experience utilizing approved AI tools and automated solutions to augment threat analysis, streamline engineering tasks, and accelerate operational workflows
• Deep working knowledge of healthcare regulatory and compliance frameworks, including HIPAA, HITECH, NIST CSF, CIS Controls, and HITRUST
• Proven track record of managing security engineering operations within a shared services healthcare environment or highly regulated industry
• All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $112,700 - $193,200 annually based on full-time employment. We comply with all minimum wage laws as applicable.
Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.

UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

UnitedHealth Group is a drug-free workplace. Candidates are required to pass a drug test before beginning employment.