Lead Detection Engineer Become a part of our caring community and help us put health first. The Lead Detection Engineer position is responsible for building and curating custom cyber threat detection content for the Humana enterprise environment. This role works closely with EIP's Threat Management and Response teams as well as other IT and EIP teams. The Lead Detection Engineer role is responsible for technical execution and delivery of services provided by the Detection Engineering team. This team provides oversight of the SIEM and owns the entire lifecycle of building and maintaining high-fidelity custom threat detection content in support of Humana's threat response operations. Use your skills to make an impact. Additional Job Description Required Qualifications: Minimum of 7 years of combined experience across detection engineering, incident response, or security engineering. Advanced technical knowledge of utilizing SIEM platforms on a large national or international scale. Extensive experience creating and maintaining custom threat detection rules, leveraging enrichment data from threat intel and attack surface services. Strong understanding of common threat adversary tools, tactics, techniques. Strong understanding of how to detect complex, multi-stage malware behaviors. Experience creating and maintaining technical policies, standards, procedures, and documentation. Preferred Qualifications: Advanced knowledge of writing scheduled queries in Splunk's Search Processing Language (SPL). Experience using the Splunk Common Information Model (CIM), Enterprise Security (ES) app, and security data models to develop and deliver threat detection services. Strong familiarity of MITRE ATT&CK or similar frameworks. Familiarity with system and network administration in both on-premise and multi-cloud environments. Experience supporting threat detection and response services within regulatory frameworks such as HIPAA, PCI, SOC2, etc. Professional certification in a relevant cybersecurity field (e.g., CISSP, CISA, CISM, CCSP). Bachelor's degree or higher in Computer Science, Cybersecurity, Information Technology, or a related field. Additional Requirements: Able to participate in an on-call rotation to support critical incidents. Remote/WAH requirements: Must have the ability to provide a high speed DSL or cable modem for a home office. Associates or contractors who live and work from home in the state of California will be provided payment for their internet expense. A minimum standard speed for optimal performance of 25x10 (25mpbs download x 10mpbs upload) is required. Satellite and Wireless Internet service is NOT allowed for this role. A dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information Travel: While this is a remote position, occasional travel to Humana's offices for training or meetings may be required. Scheduled Weekly Hours: 40 Pay Range: $129,300 - $177,800 per year This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance. About us: Humana Inc. (NYSE: HUM) is committed to putting health first for our teammates, our customers and our company. Through our Humana insurance services and CenterWell healthcare services, we make it easier for the millions of people we serve to achieve their best health delivering the care and service they need, when they need it. These efforts are leading to a better quality of life for people with Medicare, Medicaid, families, individuals, military service personnel, and communities at large. Equal Opportunity Employer: It is the policy of Humana not to discriminate against any employee or applicant for employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status. It is also the policy of Humana to take affirmative action, in compliance with Section 503 of the Rehabilitation Act and VEVRAA, to employ and to advance in employment individuals with disability or protected veteran status, and to base all employment decisions only on valid job requirements.