• Guide product teams in designing secure architectures, including zones, conduits, trust boundaries, authentication, authorization, data protection, and remote access • Develop reusable security patterns, reference architectures, and design standards • Review product architecture changes and provide actionable security recommendations • Conduct threat modeling and risk assessments aligned to IEC 62443-3-2 • Produce threat model outputs, including data flows, threat analysis, risk ratings, and recommendations • Use AI-assisted tools to accelerate threat modeling and analysis • Create deployment security guidance for secure installation, configuration, hardening, and operation • Support SDL execution by defining security requirements, performing design reviews, and evaluating security gates • Help prepare security evidence, test documentation, and compliance artifacts • Contribute reusable templates, artifacts, and lessons learned to improve team efficiency

• Perform 3rd Party information security assessments utilizing established IT risk assessment framework and assessment programs. • Provide practical recommendations to remediate control gaps • Prepare present assessment findings to a cross-functional audience. • Engage business units and Third Parties to remediate control gaps. • Communicate common information security themes and control gaps identified across the entire Third Party inventory and lifecycle. • Coordinate across functions such as security, sourcing, legal, and compliance. • Establish operating rhythm with Business Units to report out on key metrics including status of assessments and issue management. • Stay current and utilize industry standards and best practices to drive improvements in overall Third Party security posture.

• Perform 3rd Party information security assessments utilizing established IT risk assessment framework and assessment programs. • Provide practical recommendations to remediate control gaps • Prepare present assessment findings to a cross-functional audience. • Engage business units and Third Parties to remediate control gaps. • Communicate common information security themes and control gaps identified across the entire Third Party inventory and lifecycle. • Coordinate across functions such as security, sourcing, legal, and compliance. • Establish operating rhythm with Business Units to report out on key metrics including status of assessments and issue management. • Stay current and utilize industry standards and best practices to drive improvements in overall Third Party security posture.

Requisition Number: 2356996 Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. We are seeking an experienced SIEM Engineer with strong hands-on expertise in Microsoft Sentinel, Splunk, and CrowdStrike to design, implement, and manage enterprise security monitoring solutions. The ideal candidate will have deep knowledge of incident detection & response, along with exposure to network security technologies such as firewalls, IDS/IPS, and email security solutions. Primary Responsibilities: - Design, deploy, and maintain SIEM platforms including Microsoft Sentinel, CrowdStrike and Splunk - Develop and optimize use cases, detection rules, dashboards, and alerts - Integrate multiple log sources (cloud, on-prem, applications, endpoints) into SIEM - Perform security incident triage, investigation, and response - Leverage CrowdStrike for endpoint detection and response (EDR) and threat hunting - Tune SIEM and EDR solutions to reduce false positives and improve detection accuracy - Conduct threat hunting activities using telemetry from SIEM and EDR tools - Work closely with SOC teams to support incident handling and escalation - Perform log analysis and correlation to identify potential security threats - Implement automation using playbooks, SOAR, or scripting (PowerShell/Python) - Ensure compliance with security policies, standards, and frameworks - Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so Required Qualifications: - Bachelor's degree in Computer Science, Information Security, or a related field - Relevant certifications (preferred but not mandatory): Microsoft SC-200 / AZ-500 - Splunk Certified Power User / Admin - CrowdStrike certifications - CEH, CISSP, or equivalent - Solid hands-on experience with: - Microsoft Sentinel (Azure SIEM/SOAR) - Splunk (Enterprise Security preferred) - CrowdStrike Falcon (EDR) - Hands-on experience with: - Firewalls (Palo Alto, Fortinet, Check Point, etc.) - IDS/IPS solutions - Email Security Gateways (Proofpoint, Mimecast, O365 Defender, etc.) - Experience in incident response and security event analysis - Solid knowledge of SIEM architecture, log management, and correlation - Understanding of network protocols (TCP/IP, DNS, HTTP, etc.) - Familiarity with: - Azure Security / Cloud Security concepts - Threat intelligence platforms - MITRE ATT&CK framework - Scripting knowledge (Python / PowerShell) - Experience with SOAR tools At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission. Optum is a drug-free workplace. © 2026 Optum Global Solutions (Philippines) Inc. All rights reserved.