Cybersecurity - Insider Threat Engineer (L2)

About Us

WTW is a leading advisory, broking, and solutions company with a storied history dating back to 1828. From the Titanic in 1912 to supporting the Moon Buggy in 1971, we have a legacy of turning risk into growth opportunities. 

Our Lisbon Regional Delivery Hub is at the heart of this innovation, with a vibrant team of over 300 professionals dedicated to excellence every day.

The Opportunity

Are you passionate about cyber security? Do you want to help shape the future of Insider Threat and Data Loss Prevention (DLP) capabilities for a global leader? We have an exciting opportunity for an experienced and highly skilled Insider Threat Engineer to join our Cyber Defense team.

As an L2 Insider Threat Engineer, you’ll be part of a dynamic and culturally diverse team ensuring the smooth operation of our Insider Risk Management (IRM) and DLP platforms. You’ll report directly to the L3 Insider Threat Engineering Manager and play a key role in protecting WTW’s critical information assets across the globe.

This position is perfect for someone with a strong background in troubleshooting, administering, and implementing IRM and DLP technologies, particularly within the Microsoft Security stack, including Purview DLP, IRM, and Defender.

What You’ll Do

As our L2 Insider Threat Engineer, you will:

• Implement and Maintain Security Solutions: Ensure the effective operation, implementation, and troubleshooting of IRM and DLP technologies, policies, and rules across WTW.


• Collaborate with Experts: Work closely with the L3 Insider Threat Engineering Manager and cross-functional teams—IT, HR, Cyber Security, Legal, and Compliance—to define and refine policies that protect sensitive data.


• Drive Continuous Improvement: Fine-tune DLP and IRM rules to minimize false positives, while regularly assessing the Insider Threat Engineering function to identify areas for enhancement.


• Be the Go-To Expert: Serve as an escalation point for L1 Engineers, providing guidance and support as needed.


• Report on Progress: Contribute to regular management reports, offering insights on the performance and effectiveness of our IRM and DLP systems.


• Stay Ahead of the Curve: Keep up with the latest advancements in IRM and DLP technologies to ensure WTW remains at the forefront of cyber defense.

Additional Responsibilities

• Play a pivotal role in projects aimed at enhancing insider threat and data protection policies.


• Assist with other tasks as assigned by the Global Head of Insider Threat and the L3 Insider Threat Engineering Manager.

What You’ll Bring

You are the person that we are looking for if you have:

• Proven experience in implementing, troubleshooting, and administering Insider Threat and DLP technologies in a global enterprise.
• Expertise in Microsoft Security solutions, specifically Purview DLP, IRM, and Defender.
• Relevant Microsoft certifications and a strong grasp of data protection regulations (e.g., GDPR, CCPA, HIPAA).
• Excellent problem-solving skills and the ability to work independently.
• Outstanding communication skills, with the ability to collaborate effectively across different teams and stakeholders.

Bonus Skills

• Previous experience deploying the Microsoft Insider Risk Management module in a global organization.
• Hands-on experience with KQL and PowerShell.
• Industry certifications such as CISSP, CISM, or CIPP are highly desirable.

Why WTW?

At WTW, we offer more than just a job—we offer a career. Here’s what you can expect:

• Work-Life Balance: Enjoy flexible working hours and hybrid working options to suit your lifestyle.
• Competitive Compensation: Benefit from an attractive, performance-related remuneration system.
• Global Exposure: Join an international consultancy with the security of a global corporation and renowned clients.
• Career Development: Experience a steep learning curve and ample opportunities for individual career growth through on-the-job learning and specialist training.
• Collaborative Culture: Work in a collegial, appreciative, and dynamic environment where decisions are made together.
• Impactful Work: Quickly take on responsibility and make an impact with direct customer contact.
• Community and Celebration: Participate in corporate events and celebrate our successes together.

Join Us!

Be part of a team that values innovation, excellence, and collaboration. At WTW, your career is more than just a job—it’s a journey. Apply now and turn your potential into success with WTW!

Willis Towers Watson is an equal opportunity employer.