> Markdown version of [/jobs/ext/2253836-sr-director-security-engineering-psirt-remote-or-hybrid-in-mn-or-dc](https://www.wearedevelopers.com/jobs/ext/2253836-sr-director-security-engineering-psirt-remote-or-hybrid-in-mn-or-dc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Director, Security Engineering (PSIRT) - Remote or Hybrid in MN or DC - **Company:** Unitedhealth Group Inc - **Location:** Plymouth, MN, United States (Remote available) - **Experience:** Expert - **Salary:** $159,300.0 - $273,200.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Software as a Service, Cloud Computing, Cloud Engineering, Code Review, Continuous Integration, Github, Systems Development Life Cycle, Secure Coding, Software Engineering, Software Security, Cyber Threat Analysis, Kubernetes, Npm(Software), Firewall Services Module - **Published:** August 26, 2026 - **Apply:** https://dejobs.org/x/x/27969D0F11B4457A9C2376B3D84880A0/job/ ## About the Role * Dual-Track Technical Tenure: 10+ years of combined experience in Software and Security engineering. They must understand how code is built and shipped (entire SDLC) at scale to effectively tell developers how to fix it * Architectural Risk Assessment: 10+ years of experience performing Threat Modeling and deep-dive code reviews across diverse stacks (e.g., Cloud-native/K8s, embedded systems, or SaaS) to identify systemic supply chain weaknesses * SDLC Governance at Scale: 10+ years of experience implementing and maturing Secure Development Lifecycles (SDL), ensuring security checkpoints-like SBOM generation and SCA scanning-are automated into the CI/CD pipeline * Incident Response Leadership: Experience in managing high-stakes security incidents, with 5+ years specifically focused on Product Security (PSIRT) rather than just internal IT/Corporate security * Vulnerability Lifecycle Management: 5+ years of experience overseeing the full lifecycle of CVE (Common Vulnerabilities and Exposures) assignments, from initial researcher report through coordinated disclosure and patch verification Preferred Qualifications: * CISSP, GIAC (GREM, GCFA), or equivalent * Product security or cloud certifications (e.g. AWS Security, GCP Professional Security Engineer) *All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy. ## Description The Director of PSIRT leads the enterprise's response to product-related cybersecurity incidents across the software development lifecycle. This role is accountable for building and operationalising a high-performing team that proactively detects, investigates, and mitigates threats to product integrity, supply chain security, and customer trust. The Director will define the strategic vision for PSIRT, drive cross-functional alignment, and ensure readiness to respond to emerging threats in real time. You'll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week., * Incident Response Leadership * Lead the response to product-related cyber incidents, including codebase compromise, supply chain vulnerabilities (e.g. NPM, GitHub), and third-party dependency risks * Oversee the lifecycle of incident management: detection, triage, containment, eradication, recovery, and post-incident review * Strategic Planning & Governance * Define the PSIRT North Star and roadmap, including quarterly milestones and key results aligned with business outcomes * Develop and maintain incident response playbooks, escalation protocols, and tooling strategies tailored to product environments * Threat Intelligence & Detection * Integrate threat intelligence into product pipelines to proactively identify risks * Collaborate with engineering teams to embed security controls (e.g. secrets scanning, firewall rules, build runner protections) into CI/CD workflows * Cross-Functional Collaboration * Partner with Product Management, Engineering, Legal, and Cloud Infrastructure teams to ensure coordinated response and remediation * Serve as the connective tissue between ESRO, ETIPS, and business units for secure product delivery * Reporting & Communication * Provide executive-level briefings on incident status, impact, and remediation * Maintain documentation for audit, compliance, and continuous improvement * Team Development & Culture * Build and lead a multidisciplinary team of responders, analysts, and engineers * Foster a culture of operational excellence, continuous learning, and proactive risk management You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Remote Jobs](https://www.wearedevelopers.com/magazine/255-best-paying-remote-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)