Senior Cyber Security Specialist I - Insider Threat Analysis

Walgreens; United States; On-site; USD 98,600 - 157,500; Full time

Job summary

Walgreens is seeking an experienced cybersecurity professional to monitor and analyze incidents within the organization. The role involves identifying vulnerabilities and responding to cybersecurity threats, while also preparing reports for the IT security team. Candidates must have a strong background in information security and demonstrated experience in threat hunting, incident response, and risk analysis.

The ideal applicant will possess a Bachelor's degree in the field or equivalent experience and be comfortable working in a hybrid schedule with 4 days onsite and 1 day remote.

Qualifications

• Bachelor's degree and at least 4 years of Information/Cyber Security experience.
• Experience with Cyber Security in areas like incident response and endpoint forensics.
• Strong analytical and problem‑solving skills.

Responsibilities

• Monitors and investigates cybersecurity incidents.
• Identifies security flaws and responds to incidents.
• Assists with security audits and risk analysis.

Skills

Active threat hunting

Intrusion analysis

Incident response

Endpoint forensics

Malware analysis

Penetration testing

Network defense

Information security consulting

Education

Bachelor's degree in Information/Cyber Security

High School Diploma/GED

Tools

DLP technologies (Microsoft Purview, Netskope)

SIEM systems (Splunk, Sentinel)

Scripting languages (Python, PowerShell)

Job description

Job Summary

A professional having broad information security/cyber security expertise or unique knowledge. This role uses skills to contribute to development of company objectives and principles and to achieve goals in a creative.

Important Details Before Applying

• Location: Deerfield, IL
• Hybrid Schedule: 4 days onsite / 1 day remote
• Work Authorization: Work visa sponsorship is not available for this role

Job Responsibilities

• Monitors, identifies, investigates and analyzes all response activities related to cybersecurity incidents within the organization that require broad expertise or unique knowledge.
• Identifies security flaws and vulnerabilities; responds to cybersecurity incidents, conducts threat analysis as directed and addresses detected incidents.
• Evaluates event flows to identify common to advanced risks and vulnerabilities to develop and implement solutions.
• Provides assistance in monitoring the security of all designated networks and systems.
• May prepare detailed incident reports and technical briefs for the IT security team. May present issues to team.
• This role works on significant and unique issues where analysis of situations or data requires an evaluation of intangibles. Exercises independent judgment in methods, techniques and evaluation criteria for obtaining results.
• Assists with security audits, risk analysis, network forensics and penetration testing.
• Creates formal networks involving coordination among groups.
• May indirectly supervise other Specialists.
• Provides subject matter expertise and insight to clients about industry attack trends and defenses by developing and maintaining deep awareness and understanding of evolving threats, adversaries and intrusion trends. Provides subject matter expertise to less experienced team members. May participate in teaching and training members of the work team.

Basic Qualifications

• Bachelor's degree and at least 4 years of Information/Cyber Security experience OR a High School Diploma/GED and at least 7 years of experience in Information/Cyber Security
• At least 3 years of Cyber Security experience in at least three of the following: Active threat hunting (open source or commercial tooling), Intrusion analysis, Managed or enterprise information security services, Incident response, Endpoint forensics (Windows, MAC, or Linux), Malware analysis, Penetration testing, Network defense, Threat hunting, Information security consulting
• Experience establishing & maintaining relationships with individuals at all levels of the organization, in the business community & with vendors.
• Experience using time management skills such as prioritizing/organizing and tracking details and meeting deadlines of multiple projects with varying completion dates.
• Experience analyzing and reporting data in order to identify issues, trends, or exceptions to drive improvement of results and find solutions.
• Willing to travel up to/at least 10% of the time for business purposes (within state and out of state).

Preferred Qualifications

Preferred Skills

• 5+ years in cybersecurity, with focus on DLP, Insider Threat, or Security Operations
• Hands‑on experience with DLP technologies (Microsoft Purview, Netskope, Symantec, Forcepoint, etc.)
• Strong understanding of data classification, labeling, and protection strategies
• Experience conducting investigations across endpoint, network, and cloud environments
• Familiarity with SIEM/UEBA platforms (Splunk, Sentinel, Exabeam, etc.)
• Knowledge of identity systems (Active Directory, Entra ID) and access patterns
• Strong analytical and problem‑solving skills
• Experience building Insider Threat programs or use cases from ground up
• Familiarity with behavioral analytics and anomaly detection techniques
• Scripting or automation experience (Python, PowerShell)
• Understanding of regulatory frameworks (HIPAA, SOX, PCI‑DSS)
• Certifications: CISSP, GCIA, GCIH, or similar
• Experience mentoring less experienced team members

We will consider employment of qualified applicants with arrest and conviction records.

Salary Range: $98600 - $157500 / Salaried