Principal Cybersecurity Analyst; Attack Surface Mgt.) On Site MN

Explore opportunities with the Enterprise Information Security (EIS) team at United Health Group
. Join one of the world's largest health care companies and become part of the first line of defense against security threats. We are focused on strengthening our cyber defenses, ransomware resiliency, vulnerability mitigation, and securing all aspects of our systems and data globally. We are passionate about protecting the sensitive data of our members and providers. We are committed to leveraging every tool, partnership and process needed to enhance our security posture.

It is our duty to protect the information of those we serve while
Caring. Connecting. Growing together.

The Enterprise Information Security (EIS) team
is responsible forcybersecurity across our organization. We support our business and members by reducing risk, rapidly responding to threats, focusing on businessresiliencyand securing new acquisitions.

As a Principal Cybersecurity Analyst on the Attack Surface Management (ASM) team within Optum Technology's Enterprise Information Security organization, you will provide senior technical leadership to protect our global enterprise against emerging digital threats. In this role, you will lead the identification, mapping, assessment, and exposure management of external and internal digital assets across complex multi-cloud and on-premises environments. You will partner across cyber defense, threat intelligence, vulnerability management, and engineering teams to illuminate security blind spots, evaluate risk vectors, and design automated reconnaissance and remediation workflows.

By integrating modern, enterprise-approved AI tools and intelligent automation into daily operations, you will drive operational efficiency and elevate the proactive cyber resilience of healthcare platforms trusted by millions.

You'll enjoy the flexibility to work remotely
* from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

• Lead the strategic expansion and daily execution of the enterprise Attack Surface Management (ASM) program, establishing comprehensive visibility of external and internal digital assets across multi-cloud and on-premises environments
• Perform continuous discovery, validation, and risk analysis of public-facing infrastructure, cloud environments, domains, APIs, and third-party dependencies to pinpoint vulnerabilities and misconfigurations
• Partner closely with Threat Intelligence, Vulnerability Management, and Red Team operations to correlate exposure data with active threats and prioritize remediation efforts
• Design, build, and deploy automated discovery, scanning, and notification pipelines to accelerate time-to-detection and exposure remediation
• Use enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement across vulnerability assessment and attack surface analysis
• Evaluate emerging trends to inform solution design, security architecture, and strategic innovation across attack surface management
• Collaborate with cloud engineering, Dev Ops, and IT application owners to ensure proactive remediation and embed security controls into continuous deployment pipelines
• Perform QA/QC of team member tickets and tasks to ensure operational quality, while mentoring and guiding junior and mid-level analysts
• Identify and implement continuous process and cross-functional collaboration improvements
• Maintain the team documentation library, standard operating procedures, and technical playbooks
• Enhance vendor relationships and support to optimize tooling effectiveness and service delivery

You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well asprovidedevelopment for other roles you may be interested in.

• 5+ years of experience in cybersecurity, information security, or security operations
• 5+ years of dedicated experience in attack surface management (ASM), external exposure monitoring, vulnerability assessment, or threat intelligence
• 3+ years of experience assessing asset configurations and security postures across major public cloud platforms (e.g., AWS, Azure, GCP)
• 3+ years of hands-on experience utilizing enterprise ASM, threat exposure, or vulnerability discovery platforms (e.g., Cortex…