Cybersecurity Specialist - Insider Threat

Cleveland Clinic

1d • Remote

About The Position

Cleveland Clinic Health System is seeking a Cybersecurity Specialist to join their team. This role is crucial for safeguarding digital assets and protecting systems from intentional or inadvertent access. Under the supervision of the Manager of Cybersecurity Intelligence, the specialist will lead efforts to identify, investigate, and mitigate potential insider risks to protect Cleveland Clinic’s patients, assets, data, and reputation. This is a remote position with a day shift schedule from 8:00 a.m. to 5:00 p.m., including on-call shifts. Cleveland Clinic is a nonprofit multispecialty academic medical center, recognized as one of the top hospitals in the nation, with 70,800 employees worldwide and a 6,500-bed health system across multiple locations globally.

Requirements

• High School diploma/GED and seven years of Information, Clinical or Financial Systems experience, including directing, planning and scheduling a major information system project, with three years of Cyber Security experience OR Bachelor’s Degree and five years of Information, Clinical or Financial Systems experience, including directing, planning and scheduling a major information system project, with three years of Cyber Security experience
• Demonstrated ability to communicate technical concepts to non-technical stakeholders.
• Experience leveraging DLP, UEBA, SIEM, EDR/XDR and SOAR platforms for complex investigations.
• Familiarity with MITRE ATT&CK, NIST, HIPAA, GDPR, and ISO 27001.
• Hands on scripting experience (Python, PowerShell, KQL, etc.) to collect artifacts, enrich detections and automate investigate workflows.
• For Information Technology Division caregivers, ITIL Foundations certification is required within 6 months of position start date.

Nice To Haves

• Experience coordinating with internal and external counsel and eDiscovery providers.
• Experience conducting OSINT investigations.
• Industry certifications such as GCIH, GCFR, GCFA, GNFA, CEH, CFE, CCE, CFCE, CHFI, or equivalent advanced certifications.

Responsibilities

• Independently conduct end-to-end insider risk investigations while working closely with Legal, Human Resources, Cybersecurity Operations, and other cross-functional teams.
• Use monitoring and detection platforms to investigate anomalous activity for potential insider risk.
• Conduct interviews with potential insiders.
• Serve as the subject matter expert for insider risk and provide training to team members as needed.
• Leverage AI tools to accelerate investigation workflows and data analysis.
• Prepare investigation metrics, reports, and briefings.
• Develop and maintain playbooks, standard operating procedures, and guideline documentation.
• Support education and awareness programs to foster a strong security culture.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level