Cyber Intelligence Analyst Associate

Sandwich, Kent
Pfizer

ROLE SUMMARY

The Global Information Security (GIS) organization secures Pfizer’s most important information assets through world class talent, top security controls and an empowered culture that serves to enable Pfizer’s mission of delivering breakthroughs that change patients’ lives.

The Cyber Intelligence Analyst Associate is responsible for researching, analyzing, and tracking various cyber threats with a focus on motives supporting espionage and financially motivated cybercrime. The individual will derive, analyze, and deliver cyber threat intelligence that will help inform stakeholder decision making to reduce risk to Pfizer. The individual will maintain familiarity with ongoing cyber threat activity and geopolitical issues that may impact the cyber threat landscape. The individual will be highly motivated to continually grow and expand their existing technical and intelligence analysis skillset to adapt to the ever-changing threat landscape.

The position is an entry level role. Ideal candidates will have the basic qualifications shown below however candidates possessing a strong subset of skills with the motivation for continued skillset development will be considered. The individual will engage with cross functional internal colleagues and external partners. The individual will report to the Director, Global Threat Research within the Pfizer Digital Global Information Security organization.

ROLE RESPONSIBILITIES

• Acquire and maintain knowledge of the cyber threat landscape from open source and privately produced intelligence reports to include advanced threat actors, techniques, capabilities, and targets relevant to industry.
• Perform collection and analysis of threat data and intelligence to support stakeholder priority intelligence requirements (PIRs).
• Perform technical indicator analysis of cyber threats through in-depth pivoting using internally developed and external tools and services.
• Conduct in-depth intrusion analysis of cyber threats utilizing frameworks such as the Lockheed Martin Cyber Kill Chain, Diamond Model and MITRE ATT&CK.
• Develop strategic, tactical, and operational intelligence products for stakeholder dissemination.
• Participate in team projects centered around the cyber threat intelligence mission.
• Present knowledge and intelligence related to cyber threats at both a technical and management level to help shape both tactical and strategic priorities.
• Generate tactical detections and mitigations to support the identification of cyber threats.
• Provide intelligence support during incident response engagements.
• Interface with external sharing communities through the sharing of timely and relevant cyber threats.

BASIC QUALIFICATIONS

• BS in Information Security, Computer Sciences, Information Systems, Engineering, or equivalent.
• Showcase applicable experience with frameworks such as the Lockheed Martin Cyber Kill Chain, Diamond Model and MITRE ATT&CK.
• Showcase applicable experience with TCP/IP, common networking ports and protocols (HTTP, DNS, etc), traffic flow, system administration, OSI model, defense-in-depth, and common security elements.
• Showcase applicable experience with IOC pivoting techniques across different platforms and datasets.
• Showcase applicable experience in information analysis and the intelligence analysis cycle.
• Showcase applicable experience with performing malware analysis to identify functionality of adversary tools and capabilities.
• Showcase applicable experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.
• Demonstrated commitment to training, self-study and maintaining proficiency in various cyber security disciplines.

Work Location Assignment: On Premise