The Insider Risk Security Engineer joins the Information Security Insider Risk team to protect data from risks associated with individuals who have authorized access. This role involves implementing, maintaining, and troubleshooting Insider Risk Management technologies and policies across a global enterprise. You will drive tooling requirements to identify anomalous user activities, fine-tune DLP rules to minimize false positives, and provide technical expertise during active incidents. Key responsibilities include collaborating with IT, HR, and Legal teams to refine security policies and contributing to management reporting on ecosystem performance. Required skills include experience with DLP and UEBA tools, cloud security, and problem-solving. Preferred technical proficiencies include Microsoft E5 security products, KQL, YARA, Regex, JSON, and Lucene Query Syntax, alongside knowledge of behavioral analysis and psychology.
Remote (Louisville, KY)+920 days ago
$97,900–$133,500
Microsoft Purview
Proofpoint Insider Threat Management
KQL
PowerShell
Microsoft Graph API
Splunk
Defender XDR
UEBA
EDR
SIEM
Data Loss Prevention
eDiscovery
Claude Code
HIPAA
HITRUST
PCI-DSS
SOC2
Python
Go
Java
JavaScript
TypeScript
SQL
SIEM
DLP
UEBA
EDR
APIs
Data Pipelines
Identity and Access Management
Source Control
Digital Forensics
Incident Response
Security Orchestration