Introduction to Humana and the Role
Humana, a leading health and well-being company, is committed to putting health first for its teammates, customers, and the company as a whole. Through its Humana insurance services and CenterWell healthcare services, Humana makes it easier for millions of people to achieve their best health. The company is now seeking an experienced Insider Threat Management Principal to join its team, leading the Insider Threat program and ensuring the security and integrity of its assets.
Job Overview
The Insider Threat Management Principal is a technical subject matter expert for the cyber security Insider Threat program, reporting to the Associate Vice President of Threat Management and Response. This role involves leading collaboration with key enterprise partners to integrate threat intelligence, threat actor research, proactive threat hunting, and behavioral analysis. The ideal candidate will have a minimum of 10 years of experience in insider threat, offensive security methodologies, threat investigations, and forensics, with a strong understanding of the insider threat landscape and complex, multi-stage attacks.
Key Responsibilities
- Lead the Insider Threat program, integrating threat intelligence, threat actor research, proactive threat hunting, and behavioral analysis to identify and mitigate potential threats.
- Develop strategies to mitigate accidental or malicious insider threat behavior through preventive and detective technical control improvements, ensuring the security and integrity of the company's assets.
- Create and maintain policies, standards, procedures, and documentation related to insider threat management, staying up-to-date with the latest industry trends and best practices.
- Assist in high-risk, high-visibility insider threat investigations, providing expert analysis and guidance to key stakeholders.
- Assist in creating insider threat detection use cases to evaluate the effectiveness of existing controls, identifying areas for improvement and implementing changes as needed.
- Develop and deliver insider threat user awareness training for both technical and non-technical audiences, promoting a culture of security awareness and best practices throughout the organization.
- Use KPIs and other metrics to identify opportunities for process improvements, driving continuous improvement and optimization of the Insider Threat program.
- Provide support for regulatory frameworks such as HIPAA, PCI, SOC2, etc., ensuring compliance and adherence to industry standards and regulations.
Essential Qualifications
To be successful in this role, you will need:
- A minimum of 10 years of experience in insider threat, offensive security methodologies, threat investigations, and forensics, with a strong understanding of the insider threat landscape and complex, multi-stage attacks.
- Expert-level understanding of the tools, tactics, and techniques of insider threats, as well as a strong understanding of how complex, multi-stage attacks function.
- Ability to independently lead high-risk, high-visibility insider threat investigations internally with key security and enterprise partners and externally across open and closed source partnerships.
- Highly adept at presenting to high-level stakeholders, with excellent communication and interpersonal skills.
- Ability to expertly build relationships and partnerships across various business segments with executive-level leadership.
Preferred Qualifications
While not required, the following qualifications are preferred:
- Professional certification in a relevant cybersecurity field (i.e., CISSP, CFE, GCIH, etc.).
- Bachelor's degree or higher in Cybersecurity, Information Technology, or a related field.
Remote Work Requirements
This role is remote, and you will need to have:
- A high-speed DSL or cable modem for a home office, with a minimum standard speed for optimal performance of 25x10 (25mbps download x 10mbps upload).
- A dedicated space lacking ongoing interruptions to protect member PHI/HIPAA information.
- Satellite and Wireless Internet service is NOT allowed for this role.
Career Growth Opportunities and Learning Benefits
At Humana, we are committed to the growth and development of our teammates. As an Insider Threat Management Principal, you will have access to:
- Opportunities for professional development and growth, with a focus on continuous learning and skill-building.
- A comprehensive training program, with regular updates and workshops on the latest industry trends and best practices.
- A collaborative and supportive team environment, with a focus on knowledge-sharing and expertise.
Work Environment and Company Culture
At Humana, we prioritize a positive and inclusive work environment, with a focus on:
- Diversity, equity, and inclusion, with a commitment to creating a workplace where everyone feels valued and respected.
- Work-life balance, with flexible scheduling and remote work options to support your personal and professional needs.
- A culture of recognition and reward, with regular feedback and opportunities for growth and development.
Compensation, Perks, and Benefits
We offer a competitive compensation package, with:
- A salary range of $156,600 - $215,400 per year, depending on experience and qualifications.
- A bonus incentive plan, with opportunities for additional earnings based on company and individual performance.
- A comprehensive benefits package, including medical, dental, and vision benefits, 401(k) retirement savings plan, time off, and more.
Conclusion
If you are a motivated and experienced cybersecurity professional looking for a new challenge, we encourage you to apply for this exciting opportunity. As an Insider Threat Management Principal at Humana, you will have the chance to make a real impact on the security and integrity of our assets, while working in a collaborative and supportive team environment. Don't miss out on this opportunity to join our team and take your career to the next level. Apply now!
Apply Now