Senior Insider Threat Engineer

Job Summary

Responsible for the configuration and optimization of insider threat technologies, the full-time Senior Insider Threat Engineer will work remotely while ensuring effective integration of insider threat capabilities into the threat management ecosystem, collaborating with various departments to protect company assets and sensitive data.

Key Responsibilities

• Configure and maintain Microsoft Purview Insider Risk Management and Communication Compliance policies for insider threat detection
• Investigate alerts generated by Purview, performing root-cause analysis and tuning to enhance signal fidelity
• Support insider threat investigations using Microsoft Purview eDiscovery and manage case creation, custodian management, and evidence export

Required Qualifications

• 5+ years of experience in cybersecurity with a focus on insider threat and compliance technologies
• Hands-on experience configuring Microsoft Purview Insider Risk Management and DLP policies
• Experience with eDiscovery activities in support of investigations or legal holds
• Working knowledge of endpoint insider threat monitoring platforms such as Proofpoint Insider Threat Management
• Proficiency with KQL and PowerShell for automation and policy management in the Microsoft 365 ecosystem