Senior Digital Forensics and Incident Response Engineer

Senior Digital Forensics and Incident Response Engineer

The Senior Digital Forensics and Incident Response Engineer provides forensics technical expertise and investigations support to EIP Cyber Security defense stakeholders to assist with incident response, remediation, and root-cause identification. The Senior Digital Forensics and Incident Response Engineer work assignments involve moderately complex to complex issues where the analysis of situations or data requires an in-depth evaluation of variable factors.

The Senior Digital Forensics and Incident Response Engineer serves as a senior technical investigator responsible for leading and advancing Humana's response to identity theft and account takeover, and associated fraud activities. This role actively investigates identity-based threats, conducts forensic analysis to determine attack methods and root causes, and coordinates response activities to mitigate risk and protect Humana associates, members, and assets.

The engineer develops, implements, and continuously improves automation, detection capabilities, and investigative workflows to enable scalable identification, triage, and response to identity fraud campaigns. As the identity theft threat landscape evolves, this individual will help transform manual investigative processes into sustainable, automated capabilities that improve operational efficiency and investigative outcomes.

In parallel, the Senior Digital Forensics and Incident Response Engineer actively assesses and correlates incident data to enable vulnerability identification and provide forensic analysis recommendations for remediation activities. Manages a real-time forensic capability that collects, assesses, and analyzes data correlations and facilitates the creation of reports for EIP leadership consumption that provide in-depth investigative analysis into possible root causes of high-profile incidents within Humana infrastructures and assets.

As identity theft operations mature and investigative demand decreases, the role will increasingly focus on the broader Digital Forensics and Incident Response mission, supporting enterprise cyber investigations, incident response, forensic analysis, and the continued enhancement of forensic capabilities across Humana.

Begins to influence department strategy through technical leadership, operational excellence, and automation initiatives. Makes decisions on moderately complex to complex issues regarding technical approach for project components, and work is performed without direction. Exercises considerable latitude in determining objectives and approaches to assignments.

• 3+ years Cyber Security Experience
• 3+ years Digital Forensics and/or Incident Response
• 3+ years experience working with Splunk, including authoring queries, alerting and dashboard development

• 5+ years Digital Forensics experience, including experience with FTK, Axiom, Encase, and other forensics tools
• GIAC/SANS GCFE, GCFA, GIME, and/or GASF certifications
• 2+ years cloud forensics/incident response
• 1+ years working with and/or investigations of artificial intelligence systems

Remote/WAH requirements:

• Selected candidate will be required to live within 60 minutes of one of the following metropolitan locations:
  Louisville, KY; NYC metro;
  Dallas, TX;
  Charlotte, NC;
  Tampa, FL;
  Miami, FL;
  Washington, D.C.;
  Chicago, IL;
  Boston, MA;
  Atlanta, GA;
  Nashville, TN
• WAH requirements:
  Must have the ability to provide a high speed fiber, DSL or cable modem for a home office. Associates or contractors who live and work from home in the state of California will be provided payment for their internet expense.
• A minimum standard speed for optimal performance of 25x10 (25mpbs download x 10mpbs upload) is required.
• Satellite and Wireless Internet service is NOT allowed for this role.
• A dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information

Participation in an on-call rotation with other team members is mandatory for this position.

Work at Home Requirements:
To ensure Home or Hybrid Home/Office employees' ability to work effectively, the self-provided internet service of Home or Hybrid…