Senior Cyber Security Specialist I - Insider Threat Analysis

Senior Cyber Security Specialist I - Insider Threat Analysis

Job ID 1764196BR

Job Summary:

The Senior Insider Threat Analyst helps protect Walgreens team members, patients, customers, systems, and sensitive data by identifying and reducing risk. This role combines cybersecurity, data protection, behavioral analysis, and investigative expertise to assess potential insider threat activity and support DLP operations across the enterprise.

Responsibilities include alert triage, DLP policy testing and tuning, workflow improvement, automation support, and metrics generation. The analyst uses sound judgment to connect technical telemetry, business context, and behavioral indicators into clear findings and evidence-based recommendations.

Important Details Before Applying

Location: Deerfield, IL

Hybrid Schedule: 4 days onsite / 1 day remote

Work Authorization: Work visa sponsorship is not available for this role

Job Responsibilities

  • Monitors, identifies, investigates and analyzes all response activities related to cybersecurity incidents within the organization that require broad expertise or unique knowledge.
  • Identifies security flaws and vulnerabilities; responds to cybersecurity incidents, conducts threat analysis as directed and addresses detected incidents.
  • Evaluates event flows to identify common to advanced risks and vulnerabilities to develop and implement solutions.
  • Provides assistance in monitoring the security of all designated networks and systems.
  • May prepare detailed incident reports and technical briefs for the IT security team. May present issues to team.
  • This role works on significant and unique issues where analysis of situations or data requires an evaluation of intangibles. Exercises independent judgment in methods, techniques and evaluation criteria for obtaining results.
  • Assists with security audits, risk analysis, network forensics and penetration testing.
  • Creates formal networks involving coordination among groups.
  • May indirectly supervise other Specialists.
  • Provides subject matter expertise and insight to clients about industry attack trends and defenses by developing and maintaining deep awareness and understanding of evolving threats, adversaries and intrusion trends. Provides subject matter expertise to less experienced team members. May participate in teaching and training members of the work team.

About Walgreens

Founded in 1901, Walgreens ( has a storied heritage of caring for communities for generations and proudly serves nearly 9 million customers and patients each day across its approximately 8,500 stores throughout the U.S. and Puerto Rico, and leading omni channel platforms. Walgreens has approximately 220,000 team members, including nearly 90,000 healthcare service providers, and is committed to being the first choice for retail pharmacy and health services, building trusted relationships that create healthier futures for customers, patients, team members and communities.

Basic Qualifications

  • Bachelor’s degree and at least 4 years of Information/Cyber Security experience OR a High School Diploma/GED and at least 7 years of experience in Information/Cyber Security
  • At least 3 years of Cyber Security experience in at least three of the following: Active threat hunting (open source or commercial tooling), Intrusion analysis, Managed or enterprise information security services, Incident response, Endpoint forensics (Windows, MAC, or Linux), Malware analysis, Penetration testing, Network defense, Threat hunting, Information security consulting
  • Experience establishing & maintaining relationships with individuals at all levels of the organization, in the business community & with vendors.
  • Experience using time management skills such as prioritizing/organizing and tracking details and meeting deadlines of multiple projects with varying completion dates
  • Experience analyzing and reporting data in order to identify issues, trends, or exceptions to drive improvement of results and find solutions.
  • Willing to travel up to/at least 10% of the time for business purposes (within state and out of state).

Preferred Qualifications

Preferred Skills

  • 5+ years in cybersecurity, with focus on DLP, Insider Threat, or Security Operations
  • Hands-on experience with DLP technologies (Microsoft Purview, Netskope, Symantec, Forcepoint, etc.)
  • Strong understanding of data classification, labeling, and protection strategies
  • Experience conducting investigations across endpoint, network, and cloud environments
  • Familiarity with SIEM/UEBA platforms (Splunk, Sentinel, Exabeam, etc.)
  • Knowledge of identity systems (Active Directory, Entra ID) and access patterns
  • Strong analytical and problem-solving skills
  • Experience building Insider Threat programs or use cases from ground up
  • Familiarity with behavioral analytics and anomaly detection techniques
  • Scripting or automation experience (Python, PowerShell)
  • Understanding of regulatory frameworks (HIPAA, SOX, PCI-DSS)
  • Certifications: CISSP, GCIA, GCIH, or similar
  • Experience mentoring less experienced team members

We will consider employment of qualified applicants with arrest and conviction records.

The Salary below is being provided to promote pay transparency and equal employment opportunities at Walgreens. The actual hourly salary within this range that you will be offered will depend on a variety of factors including geography, skills and abilities, education, experience and other relevant factors. This role will remain open until filled. To review benefits, please jobs.walgreens.com/benefits.

Salary Range

  • $100000 - $$175,000.00 / Salaried
Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...