Lead Threat Response Operations Analyst

• Bachelor’s degree in cyber security, computer forensics, computer science, Information Security, Information Systems, Engineering, Sciences or related field.
• Some relevant experience in cyber security operations, incident response or threat investigation, with demonstrated experience leading complex investigations.
• Advanced understanding of TCP/IP, network protocols and traffic flows, operating systems, cloud and identity technologies, enterprise security architectures and defence-in-depth principles.
• Advanced knowledge of Windows operating systems, system administration, security controls, native utilities and investigative artefacts.
• Demonstrated ability to analyse and correlate large volumes of security log data using security information and event management (SIEM) platforms, such as CrowdStrike Falcon Next-Gen SIEM, Splunk, Google SecOps and draw accurate, evidence-based conclusions.
• Experience using endpoint detection and response (EDR) platforms, such as CrowdStrike Falcon, Microsoft Defender for Endpoint or VMware Carbon Black, to investigate malicious activity, analyse endpoint telemetry and support incidentcontainment and remediation.
• Experience using security analysis and investigation tools such as Wireshark, Snort, Splunk, Kali Linux, SIFT Workstation, REMnux and Volatility or comparable commercial and open-source technologies, including tools used for memory forensics and malware analysis.
• Advanced understanding of the life cycle of network threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs)
• Demonstrated ability to analyse and resolve complex technical problems, working independently and collaboratively within cross-functional teams.
• Maintain and continuously develop technical expertise in cyber security, threat response and emerging attack techniques through ongoing training, research and professional development.
• Strong written, verbal and interpersonal communication skills, together with demonstrated organisational and planning abilities and the capacity to coordinate multiple complex investigations and workstreams simultaneously.
• Excellent communication and presentation skills with the ability to present to a variety of internal audiences including senior executives.
• Demonstrated experience leading and delivering complex cyber security projects and cross-functional workstreams, achieving both short-term objectives and longer-term operational improvements.
• Practical experience using the Linux command line to support security investigations, data analysis and the operation of cyber security tools.

Preferred qualification:

• Participation in practical cyber security exercises, such as red team and blue team simulations, capture-the-flag challenges, cyber ranges or incident response exercises.
• Experience using scripting or programming languages, such as Python or PowerShell, to support security investigations, analyse security data and automate repetitive tasks.

Breakthroughs that change patients' lives...

At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence.

Our breakthrough culture lends itself to our dedication to transforming millions of lives.

One bold way we are achieving our purpose is through our company wide digital transformation strategy.

We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience.

We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self.

Let’s start the conversation!

We believe that a diverse and inclusive workforce is crucial to building a successful business.

As an employer, Pfizer is committed to celebrating this, in all its forms – allowing for us to be as diverse as the patients and communities we serve.

Together, we continue to build a culture that encourages, supports and empowers our employees.

We are proud to be a Disability Confident Employer and we encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments necessary to support your application and future career.

Our mission is unleashing the power of our people, especially those with unique superpowers.

Your journey with Pfizer starts here!

To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.