Sr Manager Cybersecurity - Remote or Hybrid in MN or DC

About the role

Optum Insight is improving the flow of health data and information to create a more connected system. We remove friction and drive alignment between care providers and payers, and ultimately consumers. Our deep expertise in the industry and innovative technology empower us to help organizations reduce costs while improving risk management, quality and revenue growth. Ready to help us deliver results that improve lives? Join us to start Caring. Connecting. Growing together.

The Senior Manager of Cyber Defense and Security Operations provides strategic and operational leadership for the organization's Security Engineering, Cloud Security, and Detection Engineering programs. This role is responsible for designing, implementing, and maintaining enterprise security technologies while driving engineering excellence, automation, and continuous improvement across a shared services healthcare cybersecurity environment. As a key leader within the Cyber Defense leadership team, this individual serves as the delegated operational leader during planned and unplanned leadership absences, providing leadership during major cybersecurity incidents and ensuring continuous protection of critical healthcare infrastructure. As an innovative leader, you will not only secure technologies but also actively coordinate the design, build, and deployment of AI-driven automations to optimize security workflows, streamline operations, and drive continuous efficiency. This is an extraordinary opportunity to work at the intersection of cybersecurity, healthcare innovation, and artificial intelligence, leading a team dedicated to securing the future of health technology.

Responsibilities

• Provide strategic and operational leadership for Security Engineering, Cloud Security, and Detection Engineering programs, aligning cybersecurity initiatives with organizational objectives, risk management priorities, and regulatory requirements
• Lead, mentor, and develop a high-performing cybersecurity analysts, engineers and technical specialists focused on accountability, collaboration, and innovation
• Direct the design, implementation, administration, and lifecycle management of enterprise security technologies, including endpoint protection, identity security, e-mail security, and Zero Trust architectures
• Establish repeatable deployment frameworks, standard architectures, configuration baselines, and automate operational runbooks to ensure continuous monitoring and prevent policy and configuration drift
• Drive cloud security strategy and lead operational security controls across Microsoft Azure, Microsoft 365, AWS, and multi-cloud environments, embedding secure architecture and posture management throughout the technology lifecycle
• Oversee the development of enterprise detection capabilities, SIEM content, detection tuning, Detection-as-Code, and MITRE ATT&CK alignment to enhance coverage and reduce false positives
• Serve as Incident Commander or Deputy Incident Commander during major cybersecurity incidents, directing technical resources and providing executive-level situational awareness
• Serve as delegated operational leader for Cyber Defense during leadership absences, representing Cyber Defense in executive committees, governance sessions, and strategic planning
• Leverage enterprise-approved AI tools to streamline workflows, automate technical tasks, evaluate emerging technology trends, and drive continuous operational improvement
• Establish engineering governance, operational metrics (KPIs/KRIs), and standards supporting HIPAA, HITECH, NIST Cybersecurity Framework, CIS Controls, and HITRUST compliance requirements

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field OR equivalent operational cybersecurity experience in lieu of a degree
• 5+ years of progressive cybersecurity experience, including enterprise security engineering and technical security operations
• 2+ years of experience in a leadership, management, or technical team lead role, mentoring and developing security professionals
• 2+ years of experience managing security controls and policies
• 1+ years of experience serving as a leader or technical lead during cybersecurity incidents

Preferred Qualifications

• Industry cybersecurity certifications such as CISSP, CISM, CCSP, GIAC (GCIH, GCFA), or HITRUST CSF Practitioner
• Demonstrated experience developing detection engineering programs aligned with MITRE ATT&CK frameworks, Detection-as-Code, and automated threat hunting
• Practical experience utilizing approved AI tools and automated solutions to augment threat analysis, streamline engineering tasks, and accelerate operational workflows
• Deep working knowledge of healthcare regulatory and compliance frameworks, including HIPAA, HITECH, NIST CSF, CIS Controls, and HITRUST
• Proven track record of managing security engineering operations within a shared services healthcare environment or highly regulated industry

Pay

The salary for this role will range from $112,700 - $193,200 annually based on full-time employment. We comply with all minimum wage laws as applicable. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc.

Schedule

You'll enjoy the flexibility to work remotely from anywhere within the U.S. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week. All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy.

Benefits

In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives.