Senior Insider Threat Engineer

Humana

Senior Insider Threat Engineer operating Humana’s Purview and Proofpoint controls to protect healthcare data. Investigating insider risks and automating detection across security platforms.

Posted 8/5/2026full-timeLouisville • District of Columbia, Florida, Illinois, Kentucky, Massachusetts, New York, North Carolina, Tennessee, Texas • 🇺🇸 United StatesSenior💰 $97,900 - $133,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in configuring and optimizing Microsoft Purview and Proofpoint technologies for insider threat management, data loss prevention, and compliance. Proficient in developing policies, conducting investigations, and ensuring adherence to industry standards such as HIPAA and PCI-DSS.

Highest-signal resume keywords

Microsoft Purview Insider Risk ManagementData Loss Prevention (DLP)KQL and PowerShell ProficiencyInsider Threat ManagementMicrosoft Certified: Information Security Administrator Associate (SC-401)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Microsoft Purview ConfigurationPolicy Design and TuningRoot-Cause AnalysisKQL DevelopmentPowerShell ScriptingGraph API UtilizationSIEM IntegrationProofpoint AdministrationData Exfiltration KnowledgeCompliance Standards Knowledge

Soft Skills

Strong Communication SkillsAbility to Translate Technical Findings

Tools & Technologies

Microsoft PurviewProofpoint Insider Threat ManagementSplunkDefender XDRSIEMUEBAClaude Code

Certifications & Qualifications

Microsoft Certified: Information Security Administrator Associate (SC-401)ITPMITVACISSPCISM

Industry Keywords

Insider ThreatData Loss PreventionInformation ProtectionCompliance TechnologiesHIPAAHITRUSTPCI-DSSSOC2Legal HoldsSensitive Information Types

Tech Stack

Tools & technologies

Cyber SecuritySplunk

About the role

Key responsibilities & impact

Configure, tune, maintain, and optimize Microsoft Purview Insider Risk Management and Communication Compliance technologies
Build and refine insider risk policies, DLP policies, sensitive information types, trainable classifiers, and adaptive scopes
Investigate Purview alerts, perform root-cause analysis of false positives, and improve signal fidelity
Use Microsoft Purview eDiscovery Standard and Premium for insider threat investigations, legal holds, and HR/Legal inquiries
Operate and tune Proofpoint Insider Threat Management to capture user activity, screen captures, and file movement evidence
Correlate Purview and Proofpoint telemetry with SIEM, UEBA, and EDR data sources such as Splunk and Defender XDR
Support policies, procedures, and technical standards aligned with industry best practices
Develop KQL, PowerShell, and Graph API scripts and queries for automation, reporting, and health checks
Track KPIs/KRIs and report on platform health and detection coverage
Ensure insider threat practices meet HIPAA, HITRUST, PCI-DSS, SOC2, and related requirements
Partner with Security Operations, HR, Legal, Compliance, and business stakeholders
Report to the Insider Threat Lead

Requirements

What you’ll need

5+ years of cybersecurity experience focused on insider threat, data loss prevention, information protection, and/or compliance technologies
Hands-on experience configuring and tuning Microsoft Purview Insider Risk Management, Communication Compliance, and DLP
Experience with policy design, scoping, and alert triage
Experience supporting Microsoft Purview eDiscovery Standard/Premium or comparable platforms for investigations or legal holds
Working knowledge of Proofpoint Insider Threat Management or equivalent platforms such as DTEX or Teramind
Knowledge of insider threat tactics, techniques, and procedures, including data exfiltration, fraud, intellectual property theft, and sabotage
Proficiency with KQL and PowerShell
Strong communication skills and ability to translate technical findings into business risk language
Microsoft Certified: Information Security Administrator Associate (SC-401) preferred
Additional insider threat or cybersecurity certifications such as ITPM, ITVA, CISSP, or CISM preferred
Bachelor's degree or higher in Cybersecurity, Information Technology, Data Science, or a related field preferred
Hands-on experience with Claude Code or similar agentic AI development tools preferred
Familiarity with Microsoft Graph API, adaptive scopes, sensitivity labels, and trainable classifier development preferred
Hands-on Proofpoint ITM administration, including agent deployment, rule tuning, and evidence handling preferred
Experience integrating Purview and Proofpoint signals with SIEM/UEBA platforms preferred

Benefits

Comp & perks

Bonus incentive plan based on company and/or individual performance
Medical benefits
Dental benefits
Vision benefits
401(k) retirement savings plan
Paid time off
Company holidays
Personal holidays
Paid parental leave
Paid caregiver leave
Short-term disability
Long-term disability
Life insurance
Self-provided internet service; minimum 25 Mbps download and 10 Mbps upload required
Remote work from a dedicated space without ongoing interruptions
Occasional travel for training or meetings