Senior Cybersecurity Analyst

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Primary Responsibilities:

• Manage security events and incidents via all intake mechanisms
• Provide security consultation to IT and business
• Security Incident management
• Remediate security control gaps
• Accomplish security related project goals identified via security events
• Participate in escalated events and manage security incident War Rooms
• Improve process and intake taxonomy
• Promote teamwork across the broader EIS and Cyber Defense Organization
• Participate in documentation review and continuous operational improvement
• Understand and respond to security alerts
• Be able to collaborate with different security teams/non-security teams and acquired entities for remediation and containment
• To conduct and run Tabletop Exercises for Internal/AE's and document the process gaps
• Work on complete eradication of security incident
• Work with engineering team to build in security functionalities and to recognize next steps out of security incidents
• To conduct Lesson learned and post incident review activities
• To collaborate with Engineering team for fine tunning of use cases and security sensors
• To work on cloud security incidents (Azure, AWS and GCP) and should be well versed in cloud technologies and environment
• To understand, remediate and involve teams to patch vulnerabilities
• Be able to participate in internal/External ISO27001, HI Trust Audits
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

• Undergraduate degree or equivalent experience
• Security Certification such as Security+, CEH, CISSP, AZ900, AWS
• Experience in handling major security breaches
• Good experience in Client/vendor interaction
• SIEM knowledge and log analysis
• Good knowledge of Security incident response process
• Good knowledge in Vulnerability management process
• Good understanding on ITIL framework like Incident, Change, Problem
• Good understanding of risk acceptance & risk exceptions
• Clear understanding on different attack vectors, malwares, OWASP 10 and other attack surfaces
• Worked on security sensors which includes proxy, email gateway, Anti-Virus and DLP
• Previous incident management exposer
• Proven solid planning and problem-solving skills
• Proven ability to work Morning or afternoon shift (weekdays)