Note: The job is a remote job and is open to candidates in USA. UnitedHealth Group is a global organization that delivers care aided by technology to help millions of people live healthier lives. As a Principal Cybersecurity Analyst, you will lead the design, development, and maintenance of automation solutions to enhance cybersecurity operations, partnering closely with various teams to identify and implement high-impact automation opportunities.
Responsibilities
- Design, develop, and maintain Splunk SOAR playbooks, automations, and custom applications or actions to streamline cybersecurity operations
- Translate complex security operations and incident response requirements into effective, scalable, and resilient automation solutions
- Integrate SOAR workflows seamlessly with security tools, APIs, and enterprise platforms
- Design, develop, and deploy AI-powered solutions to address complex cyber defense challenges, emphasizing the responsible and ethical use of AI
- Partner with Cyber Defense, SOC, and incident response teams to proactively identify automation opportunities and optimize overall operational workflows
- Use and leverage enterprise-approved AI tools to automate repetitive tasks, optimize security workflows, and drive continuous operational improvements
- Provide senior-level technical leadership, mentoring other analysts, and contributing to automation standards, reusable frameworks, and industry best practices
- Evaluate emerging technology trends, including AI advancements, to inform solution design, security automation, and strategic innovation
Skills
- 6+ years of Python development experience
- 6+ years of Cybersecurity experience
- Hands-on experience with Splunk SOAR, including custom application and action development
- Solid experience with Python, API integrations, and automation design
- Experience with GitHub and project/work tracking tools (such as GitHub Projects)
- Working knowledge of cloud platforms (AWS, Azure, and GCP)
- Proven ability to translate ambiguous or complex requirements into scalable technical solutions
- Bachelor's degree in Cybersecurity, Computer Science, or a related technology field (or equivalent professional experience in lieu of a degree)
- Experience with Splunk Enterprise Security (ES) and Splunk Search Processing Language (SPL)
- Experience with CI/CD and source control practices for security automation content
- Experience creating reusable automation frameworks
- Experience with AI agents, LLM-integrated workflows, or AI-assisted analyst workflows
- Familiarity with AI governance concepts, including approval workflows, guardrails, and human-in-the-loop design
Benefits
- A comprehensive benefits package
- Incentive and recognition programs
- Equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements)
Company Overview