Optum
InfoSec Engineer Consultant (Security Incident Response)
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Optum
Optum, Inc. is a prominent American healthcare company and a subsidiary of UnitedHealth Group, formed in 2011 through the merger of pharmacy and care delivery services. Based in Eden Prairie, Minnesota, Optum employs around 310,000 people and ranks among the largest healthcare service providers in the U.S. The company operates through three main segments: OptumHealth, which delivers direct healthcare services including primary and specialty care; OptumInsight, which offers data, analytics, and advisory services to enhance healthcare operations; and OptumRx, a pharmacy care services provider managing prescription drug benefits. Optum also has a venture capital arm, Optum Ventures, that invests in innovative healthcare technology companies. Optum has expanded its reach through strategic acquisitions and operates internationally in countries like Brazil, India, Ireland, and the United Kingdom. With a focus on integrated care and technology solutions, Optum serves a diverse customer base, including employers, government agencies, and healthcare providers.
Security at Optum
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Protect regulated health data through a compliance-driven, risk-managed AppSec approach that emphasizes shift-left integration into the SDLC (secure design reviews, threat modeling, SAST/DAST/SCA in pipelines), coordinated vulnerability intake and remediation, and continuous monitoring/defense in production.”
Security Team
Hybrid operating model: enterprise security functions that own policy, governance, vulnerability intake and ATO/compliance, plus embedded AppSec/Product Security engineers working with product teams. Roles evidenced in postings/profiles include Application Security Engineers, Product Security leads, TVM/Threat & Vulnerability Management engineers, Security Architects, and senior leaders responsible for metrics and executive reporting.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.