Senior Insider Threat Engineer (Microsoft Purview)

Location: Remote within the United States; occasional travel to hirify.global offices for training or meetings may be required.

Salary: $97,900–$133,500 per year, plus eligibility for a bonus incentive plan.

Company

hirify.global is a U.S. healthcare and health insurance company serving Medicare, Medicaid, individual, military, and community populations through hirify.global and CenterWell services.

What you will do

• Configure, tune, and maintain Microsoft Purview Insider Risk Management, Communication Compliance, DLP, and eDiscovery workloads.
• Develop insider risk policies, sensitive information types, trainable classifiers, adaptive scopes, and detection use cases.
• Investigate Purview alerts, analyze false positives, and improve detection fidelity and analyst efficiency.
• Operate Proofpoint Insider Threat Management to monitor endpoint activity, screen captures, and file movement evidence.
• Correlate Purview and Proofpoint telemetry with SIEM, UEBA, and EDR sources such as Splunk and Defender XDR.
• Automate policy deployment, reporting, and platform health checks using KQL, PowerShell, and Microsoft Graph API while tracking operational metrics and regulatory alignment.

Requirements

• 5+ years of cybersecurity experience focused on insider threat, DLP, information protection, or compliance technologies.
• Hands-on experience with Microsoft Purview Insider Risk Management, Communication Compliance, DLP, policy design, scoping, and alert triage.
• Experience with Microsoft Purview eDiscovery Standard or Premium, investigations, and legal holds.
• Working knowledge of Proofpoint Insider Threat Management or comparable endpoint insider threat platforms.
• Proficiency with KQL and PowerShell, plus knowledge of insider threat tactics including data exfiltration, fraud, intellectual property theft, and sabotage.
• Must work from a dedicated space that protects member PHI and HIPAA information; home internet must provide at least 25 Mbps download and 10 Mbps upload.

Nice to have

• Microsoft Certified: Information Security Administrator Associate (SC-401) or other cybersecurity and insider threat certifications.
• Bachelor’s degree or higher in cybersecurity, information technology, data science, or a related field.
• Experience with Claude Code or similar agentic AI development tools.
• Familiarity with Microsoft Graph API, adaptive scopes, sensitivity labels, trainable classifiers, and Proofpoint ITM administration.
• Experience integrating insider threat signals with SIEM and UEBA platforms.

Culture & Benefits

• Remote work arrangement with occasional office travel for training or meetings.
• Full-time schedule of 40 hours per week.
• Medical, dental, and vision coverage.
• 401(k), paid time off, company and personal holidays, and paid parental and caregiver leave.
• Short- and long-term disability coverage, life insurance, and wellness-focused benefits.