Cybersecurity Operations Specialist - Hybrid

Grow your career at Cedars-Sinai!

The Enterprise Information Services (EIS) team at Cedars-Sinai understands that true clinical transformation and the optimization of a clinical information systems implementation is fueled through the alignment of the right people, processes, and technologies. Cedars-Sinai has once again solidified its position as a global healthcare technology leader, receiving top accolades in not one but two prestigious surveys.

Why work here?

Cedars-Sinai placed in the top 20 on Newsweek’s “World's Best Smart Hospitals 2024” list, which highlights hospitals that have excelled in the utilization of electronic functionalities, telemedicine, digital imaging, artificial intelligence and robotics.

The organization’s Healthtech excellence was acknowledged again, this time by the esteemed “CHIME Digital Health Most Wired“ recognition program. Cedars-Sinai was assigned a Level 10—the most prestigious level of certification—five years in a row (one of only four health systems worldwide). Cedars-Sinai netted high scores across multiple verticals and particularly excelled in areas of infrastructure, interoperability, and population health innovation.

What will you be doing in this role:

The Cybersecurity Operations Specialist is responsible for active monitoring, detection, analysis, and response to cybersecurity threats. This position plays a critical role in maintaining situational awareness and protecting enterprise systems, networks, and data from unauthorized access or disruption. The role involves working with various security tools and platforms to triage alerts, investigate incidents, and support containment and recovery efforts. Strong analytical skills, attention to detail, and the ability to recognize threat patterns are essential. This position also requires effective collaboration with cross-functional teams and the ability to document findings and actions clearly.

• Versatility with a range of security tools and platforms (e.g., SIEM, EDR, firewall logs, threat intelligence feeds) to support alert triage and incident response.
• Strong analytical thinking skills with the ability to detect suspicious patterns, identify anomalies, and recognize emerging threats.
• Proficiency in reviewing logs across various systems (e.g., Windows, Linux, network devices) to identify anomalous or unauthorized activity.
• Ability to consistently meet response time expectations for alerts and incidents, maintaining a sense of urgency and accountability.
• Clear and structured documentation of investigation findings, remediation steps, and response actions for both technical and non-technical audiences.

Experience Requirements:

Two (2) plus year’s of experience in a cybersecurity operations role with a focus on investigating security alerts, analyzing logs, and supporting incident response activities across endpoint, network, and cloud environments.

Demonstrated understanding of computer/network security, operating systems (UNIX/LINUX, Windows and NT).

LAN/WAN networking protocols such as: TCP/IP, routing, firewalls, IDS/IPS, PKI and encryption.

Strong understanding of core cybersecurity concepts including network protocols, common attack techniques (e.g., phishing, privilege escalation, lateral movement), endpoint and web-based threats, and access control principles relevant to security alert investigation and response.

Educational/Certification Requirements:

High School Diploma/GED.

Bachelor’s Degree in Computer Science, Information Technology, or related field. (preferred)

CISSP (Certified Information Systems Security Professional) certificate. (preferred)

#LI-Hybrid