> Markdown version of [/jobs/ext/3835616-principal-network-detection-response-engineer](https://www.wearedevelopers.com/jobs/ext/3835616-principal-network-detection-response-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Network Detection & Response Engineer

- **Company:** Unitedhealth Group Inc
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $112,700.0 - $193,200.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Border Gateway Protocol, Cyber Security, System Configuration, Deep Packet Inspection, Domain Name System (DNS), Intrusion Detection and Prevention, Network Security, Network Architecture, Network Forensics, Network Protocols, Performance Tuning, Security Information and Event Management, Systems Integration, TCP/IP, Wireshark, Cloud-native Network Functions (CNF), Transport Layer Security, Mitre Att&ck, Amazon Virtual Private Cloud (VPC), Splunk, Serverless Computing
- **Published:** October 19, 2026
- **Apply:** https://www.juju.com/job/1_uhcg2-99867708512

## About the Role

threat tactics, techniques, and procedures (TTPs) into actionable detections + Conduct technical reviews, risk assessments, and architectural evaluations of proposed network infrastructure changes to ensure alignment with security detection objectives + Mentor senior and junior security engineers, providing technical guidance, rule reviews, and subject matter expertise in network defense and threat hunting You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. **Required Qualifications:** + 5+ years of professional experience in cybersecurity engineering, network security, or intrusion detection/prevention + 3+ years of hands-on experience deploying, configuring, and tuning Network Detection & Response (NDR) or Network Traffic Analysis (NTA) platforms (e.g., Corelight, Darktrace, ExtraHop,
Zeek/Bro, Suricata) + 3+ years of experience analyzing network protocols (e.g., TCP/IP, DNS, TLS, BGP) and conducting deep packet inspection using tools such as Wireshark, Zeek, or Suricata + 3+ years of experience integrating network telemetry and security alerts into enterprise SIEM (e.g., Splunk, Sentinel) and SOAR tools **Preferred Qualifications:** + Industry certifications in information security or network security (e.g., CISSP, GCIA, GCIH, GNFA, CCNP Security) + Experience engineering security detections for cloud networks and cloud-native services (e.g., AWS VPC Traffic Mirroring, Azure Network Watcher, GCP Packet Mirroring) + Knowledge of the MITRE ATT&CK framework with demonstrated success mapping network detections to adversary techniques + Solid background in decrypting or inspecting SSL/TLS traffic and analyzing encrypted network sessions + Proven ability to communicate complex technical security risks and detection strategies to senior engineering
and leadership stakeholders *All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc.