Lead Analyst, Cyber Threat Intelligence

ROLE SUMMARY

Our Global Cyber Defense team is responsible for safeguarding Pfizers digital assets and infrastructure through proactive threat detection response and risk mitigation across on-premises cloud and hybrid environments.

The Cyber Threat Intelligence (CTI) Lead is responsible for the development and execution of a threat intelligence program that enables proactive cyber defense across a global pharmaceutical enterprise. This role is responsible for transforming external and internal threat data into actionable intelligence that protects intellectual property clinical trial systems patient data manufacturing operations and the supply chain.

As part of the Cyber Defense organization this role partners closely with the SOC and Incident Response Vulnerability Management Cloud Services Endpoint Security and GRC teams to anticipate adversary activity inform detection and response and guide strategic security decisions.

ROLE RESPONSIBILITIES

• Define and execute the cyber threat intelligence strategy aligned to business priorities risk tolerance and regulatory obligations.

• Establish intelligence requirements focused on threats to pharmaceutical R&D clinical operations manufacturing and thirdparty ecosystems.

• Lead analysis of threat actors campaigns malware and TTPs with emphasis on nationstate ransomware insider and supplychain threats relevant to life sciences.

• Partner with SOC and Detection Engineering teams to translate intelligence into usecase development alert tuning and threathunting hypotheses.

• Support Incident Response during active investigations by providing adversary context likely next steps and mitigation guidance.

• Collaborate with Vulnerability Management to prioritize remediation based on active exploitation and threat relevance.

• Manage relationships with threat intelligence vendors industry ISACs and trusted peer communities.

• Serve as a trusted advisor to cyber leadership by clearly articulating threat trends business impact and risk implications.

• Define and track CTI metrics (e.g. intelligence utilization detection impact stakeholder satisfaction).

• Continuously improve intelligence processes tooling and integration with cyber defense workflows.

• Ensure CTI activities align with internal policies data handling requirements and ethical standards.

BASIC QUALIFICATIONS

• Bachelors degree in Cybersecurity Information Security Computer Science or a related field or equivalent practical experience.

• 4 years of experience in cyber threat intelligence security operations threat detection or related cybersecurity roles.

• Strong understanding of cyber threat actors attack techniques and intelligence analysis concepts.

• Experience working with threat intelligence sources including opensource intelligence and commercial feeds.

• Ability to translate technical threat intelligence into clear actionable insights for diverse stakeholders.

• Strong organizational and communication skills with the ability to manage priorities in a dynamic threat environment.

• Demonstrated ability to effectively manage and collaborate with global crossregional teams including flexibility to participate in meetings aligned to global time zone needs.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset adaptability to change and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• Experience operating or supporting a formal Cyber Threat Intelligence capability within an enterprise environment.

• Familiarity with threat intelligence platforms intelligence lifecycle processes and structured analytic techniques.

• Knowledge of frameworks such as MITRE ATT&CK for adversary and tactic mapping.

• Prior experience leading or mentoring analysts or serving in a technical lead or teamlead capacity.

• Experience collaborating with SOC incident response vulnerability management or offensive security teams.

• Exposure to regulated or highly controlled environments (e.g. healthcare life sciences financial services).

• Relevant professional certifications (e.g. CISSP CISM GCTI GCIH or equivalent intelligence or securityfocused credentials).

WORK SCHEDULE TRAVEL REQUIREMENTS

• Travel as required by the business (less than 5% domestic and/or international)

• Work Location Assignment: Must be able to work in assigned Pfizer office 2-3 days per week or as needed by the business

Please apply by sending your CV in English.

Work Location Assignment:Hybrid

Purpose

Breakthroughs that change patients lives... At Pfizer we are apatient centric company guided by our four values: courage joy equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives.

Digital Transformation Strategy

One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience.

Flexibility

We aim to create a trusting flexible workplace culture which encourages employees to achieve work life harmony attracts talent and enables everyone to be their best working start the conversation!

Equal Employment Opportunity

We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer Pfizer iscommitted to celebratingthisin all itsforms allowing for us to be as diverse as the patients and communities we serve. Together we continue to build a culture that encourages supports and empowers our employees.

Disability Inclusion

Our mission is unleashing the power of all our people and we are proud to be a disability inclusive employer ensuring equal employment opportunities for all candidates. We encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments to support your application and future career. Your journey with Pfizer starts here!

Pfizer endeavors to make accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing please email This is to be used solely for accommodation requests with respect to the accessibility of our website online application process and/or interviewing. Requests for any other reason will not be returned.

To learn more about acceptable and prohibited uses of AI during the recruitment process please review our candidate AI-use guidelines available onPfizer Careers.

Information & Business Tech

Required Experience:

Senior IC

Employment Type : Full-Time
Experience: years
Vacancy: 1