This role pays less than
98%
of similar roles. Most pay
$151,500–$213,000
— the shaded band above.
At the midpoint, this role pays about
$116k
versus about
$182k
for comparable roles.
Based on 240 similar postings.
Employer
About Humana
Humana Inc. is a leading American for-profit health insurance company based in Louisville, Kentucky, specializing in Medicare Advantage plans.
Humana currently has
10 open roles
on FindRole.
Listed pay typically runs
$135,200–$185,900
across 10 roles with salary data.
The Senior Insider Threat Engineer joins the insider threat team to manage the configuration, tuning, and optimization of enterprise insider threat technologies. This role involves building and refining Microsoft Purview Insider Risk Management and Communication Compliance policies, developing trainable classifiers, and performing alert triage to reduce analyst fatigue. The engineer will also provide eDiscovery support for legal holds and investigations while managing Proofpoint Insider Threat Management to capture user activity telemetry. Key responsibilities include correlating data from Splunk and Defender XDR to identify risks like data exfiltration or intellectual property theft. Technical requirements include proficiency in KQL, PowerShell, and Graph API to automate operations. The role ensures compliance with HIPAA, HITRUST, PCI-DSS, and SOC2 standards while protecting sensitive information through advanced detection rules and automated reporting for the organization's security ecosystem.
Configure, tune, and maintain Microsoft Purview Insider Risk Management and Communication Compliance policies.
Develop and refine insider risk use cases, sensitive information types, and trainable classifiers.
Investigate Purview alerts and perform root-cause analysis to reduce false positives and improve signal fidelity.
Execute eDiscovery requests and manage legal holds for HR and legal investigations.
Operate and tune Proofpoint Insider Threat Management to capture user activity telemetry and evidence.
Correlate Purview and Proofpoint data with SIEM, UEBA, and EDR platforms to enrich investigations.
Develop KQL scripts and PowerShell queries to automate policy deployment and operational reporting.
Track key performance indicators regarding alert volume, mean time to respond, and detection coverage.
What we're looking for
5+ years of experience in cybersecurity focusing on insider threat, data loss prevention, information protection, and/or compliance technologies.
Hands-on experience configuring and tuning Microsoft Purview Insider Risk Management, Communication Compliance, and DLP.
Experience supporting eDiscovery activities using Microsoft Purview eDiscovery Standard/Premium or comparable platforms.
Working knowledge of endpoint insider threat monitoring platforms such as Proofpoint ITM or equivalent.
Working knowledge of insider threat tactics, techniques, and procedures including data exfiltration, fraud, IP theft, and sabotage.
Proficiency with KQL and PowerShell for querying, automation, and policy management across the Microsoft 365/Purview ecosystem.
Strong communication skills to translate technical findings into business risk language for peers and leadership.
Bachelor's degree or higher in Cybersecurity, Information Technology, Data Science, or related field (preferred); additional certifications like CISSP or CISM (preferred).