Senior Insider Threat Engineer

Humana

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
Louisville, KYCharlotte, NCTampa, FLDallas, TXWashington, DCChicago, ILAtlanta, GANashville, TNMiami, FLBoston, MA
Salary
$97,900–$133,500 / yr
Employment
Full-time
Posted
20 days ago
Freshness
Confirmed live today
Closes
Nov 7, 2026

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $186k
This role $116k
$82k $243k
below market most similar roles pay here above market

This role pays less than 99% of similar roles. Most pay $154,562–$217,500 — the blue band above. At the midpoint, this role pays about $116k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About Humana

Humana Inc. is a leading American for-profit health insurance company based in Louisville, Kentucky, specializing in Medicare Advantage plans.

Humana currently has 61 open roles on FindRole.

Listed pay typically runs $129,300–$177,800 across 27 roles with salary data.

Most-posted roles

View all roles at Humana

At a glance

TL;DR · Senior Insider Threat Engineer

The Senior Insider Threat Engineer joins the insider threat team to manage the configuration, tuning, and optimization of enterprise insider threat technologies. This role involves building and refining Microsoft Purview Insider Risk Management and Communication Compliance policies, developing trainable classifiers, and managing sensitive information types. The engineer will perform alert triage, root-cause analysis, and eDiscovery investigations to mitigate negligent or malicious risks. Key responsibilities include operating Proofpoint Insider Threat Management to capture telemetry and correlating signals with Splunk and Defender XDR. The position requires proficiency in KQL, PowerShell, and Microsoft Graph API to automate reporting and policy deployment. The work focuses on safeguarding sensitive data and assets while ensuring compliance with HIPAA, HITRUST, PCI-DSS, and SOC2 regulatory frameworks within a complex threat management ecosystem.

What you'll do

  • Configure, tune, and maintain Microsoft Purview Insider Risk Management and Communication Compliance policies.
  • Build and refine IRM policies, sensitive information types, and trainable classifiers to identify risk activities.
  • Investigate Purview-generated alerts and perform root-cause analysis to reduce false positives and analyst fatigue.
  • Use Microsoft Purview eDiscovery to support investigations, legal holds, and defensible exports of evidence.
  • Operate and tune Proofpoint Insider Threat Management to capture user activity telemetry and file movement.
  • Correlate Purview and Proofpoint telemetry with SIEM, UEBA, and EDR data sources like Splunk and Defender XDR.
  • Develop KQL and PowerShell scripts to automate policy deployment, reporting, and operational health checks.
  • Track KPIs and KRIs to produce operational reporting on platform health and detection coverage.

What we're looking for

  • 5+ years of experience in cybersecurity focusing on insider threat, data loss prevention, information protection, and/or compliance technologies.
  • Hands-on experience configuring and tuning Microsoft Purview Insider Risk Management, Communication Compliance, and DLP.
  • Experience supporting eDiscovery activities using Microsoft Purview eDiscovery Standard/Premium or comparable platforms.
  • Working knowledge of endpoint insider threat monitoring platforms such as Proofpoint Insider Threat Management (ITM) or equivalent.
  • Working knowledge of insider threat tactics, techniques, and procedures (TTPs) including data exfiltration, fraud, IP theft, and sabotage.
  • Proficiency with KQL and PowerShell for querying, automation, and policy management across the Microsoft 365 / Purview ecosystem.
  • Strong communication skills to translate technical findings into business risk language for peers and leadership.
  • Bachelor's degree or higher in Cybersecurity, Information Technology, Data Science, or related field (preferred).

More like this

Similar roles

Senior Insider Threat Investigator

Allstate

Remote (IL) 4 days ago $80,000–$165,000
Digital Forensics SIEM DFIR NIST Cybersecurity Framework ISO 27001 GDPR Risk Analytics Insider Threat Mitigation Penetration Testing Root-Cause Analysis Cybersecurity Investigations Behavioral Monitoring Threat Assessment
3+ yrs exp Remote

Insider Risk Security Engineer

Lam Research

Tualatin, OR 63 days ago
Insider Risk Management DLP UEBA Microsoft E5 KQL YARA Regex JSON Lucene Query Syntax Cloud Security Behavioral Analysis Security Engineering Incident Response Cybersecurity
5+ yrs exp Hybrid

Insider Risk Security Engineer

Lam Research

Phoenix, AZ 63 days ago
Insider Risk Management DLP UEBA Microsoft E5 KQL YARA Regex JSON Lucene Query Syntax Cloud Security Behavioral Analysis Information Security Cybersecurity Engineering
5+ yrs exp Hybrid

Security Monitoring and Response Analyst II

Mastercard

O'Fallon, MO 11 days ago $76,000–$127,000
DLP EDR SIEM User Behavior Analytics Microsoft Purview Microsoft Defender Microsoft Sentinel Endpoint DLP PowerShell Python Shell BASH Java C/C++ C# Perl Windows macOS OSINT GDPR Incident Response Digital Forensics Threat Hunting

Insider Risk Technical Analyst

JLL (Jones Lang LaSalle)

Remote (Chicago, IL) 19 days ago
DLP SIEM UEBA EDR XDR Digital Forensics eDiscovery Security+ CISSP GCFA Microsoft SC-200 Splunk SOC Cyber Risk Management
3+ yrs exp Remote

Lead Security Monitoring and Response Analyst (Insider Threat Program Lead)

Mastercard

O'Fallon, MO 10 days ago $122,000–$207,000
Data Loss Prevention (DLP) User Activity Monitoring (UAM) User Behavior Analytics (UBA) Microsoft Purview Microsoft Defender Microsoft Sentinel Endpoint DLP SIEM Incident Response Digital Forensics Threat Hunting OSINT Windows macOS GDPR CISSP GCIH GCIA Security+