Senior Insider Threat Engineer

This is a fully remote position, open to applicants in District of Columbia, +8 more states.

📋 Description

• Configure, optimize, and sustain Microsoft Purview Insider Risk Management and Communication Compliance policies.

• Develop and enhance insider risk policies, sensitive information types, trainable classifiers, and adaptive scopes.

• Examine alerts generated by Purview and conduct root-cause analysis of false positives.

• Implement tuning cycles to enhance signal accuracy and minimize analyst fatigue.

• Utilize Microsoft Purview eDiscovery Standard/Premium for insider threat investigations, legal holds, and HR/Legal inquiries.

• Create cases, manage custodians, search and review evidence, and execute defensible evidence exports.

• Operate and fine-tune Proofpoint Insider Threat Management to gather user activity telemetry, screen captures, and file movement evidence.

• Integrate Purview and Proofpoint telemetry with SIEM, UEBA, and EDR data sources like Splunk and Defender XDR.

• Support policies, procedures, and technical standards in line with industry best practices.

• Develop KQL, PowerShell, and Graph API scripts and queries to automate policy deployment, reporting, and health checks.

• Monitor KPIs/KRIs and generate operational reports on platform health and detection coverage.

• Ensure that insider threat technologies and practices comply with HIPAA, HITRUST, PCI-DSS, SOC2, and other relevant regulatory requirements.

• Collaborate with Security Operations, HR, Legal, Compliance, and enterprise business partners.

• Report to the Insider Threat Lead.

• Occasional travel to Humana offices for training or meetings may be necessary.

⛳️ Requirements

• Over 5 years of experience in cybersecurity, focusing on insider threat, data loss prevention, information protection, and/or compliance technologies.

• Practical experience in configuring and fine-tuning Microsoft Purview Insider Risk Management, Communication Compliance, and DLP, including policy design, scoping, and alert triage.

• Experience in supporting eDiscovery activities using Microsoft Purview eDiscovery Standard/Premium or a comparable platform for investigations or legal holds.

• Familiarity with endpoint insider threat monitoring platforms such as Proofpoint Insider Threat Management (ITM) or similar, including DTEX or Teramind.

• Understanding of insider threat tactics, techniques, and procedures, including data exfiltration, fraud, IP theft, and sabotage.

• Proficiency in KQL and PowerShell for querying, automation, and policy management within the Microsoft 365 / Purview ecosystem.

• Excellent communication skills with the ability to translate technical findings into business risk language.

• Bachelor's degree or higher in Cybersecurity, Information Technology, Data Science, or a related field (preferred).

• Microsoft Certified: Information Security Administrator Associate (SC-401) (preferred).

• Additional certifications in insider threat or cybersecurity, such as ITPM, ITVA, CISSP, or CISM (preferred).

• Hands-on experience with Claude Code or equivalent agentic AI development tools.

• Knowledge of Microsoft Graph API, adaptive scopes, sensitivity labels, and trainable classifier development.

• Experience in administering Proofpoint Insider Threat Management, including agent deployment, rule tuning, and evidence handling.

• Experience in integrating Purview and Proofpoint signals with SIEM/UEBA platforms such as Splunk and Defender XDR.

• Minimum home internet speed of 25 Mbps download and 10 Mbps upload for remote or hybrid employees.

• Ability to work from a designated space without ongoing interruptions to safeguard member PHI/HIPAA information.

🏝️ Benefits

• Bonus incentive plan based on company and/or individual performance.

• Medical benefits.

• Dental benefits.

• Vision benefits.

• 401(k) retirement savings plan.

• Paid time off.

• Company holidays.

• Personal holidays.

• Paid parental leave.

• Paid caregiver leave.

• Short-term disability.

• Long-term disability.

• Life insurance.

• Dedicated home workspace arrangement.

• Remote work arrangement.

• Occasional travel to Humana offices for training or meetings.