Lead Analyst, Cyber Threat Intelligence

Job description

ROLE SUMMARY Our Global Cyber Defense team is responsible for safeguarding Pfizer’s digital assets and infrastructure through proactive threat detection, response, and risk mitigation across on-premises, cloud, and hybrid environments. The Cyber Threat Intelligence (CTI) Lead is responsible for the development and execution of a threat intelligence program that enables proactive cyber defense across a global pharmaceutical enterprise. This role is responsible for transforming external and internal threat data into actionable intelligence that protects intellectual property, clinical trial systems, patient data, manufacturing operations, and the supply chain. As part of the Cyber Defense organization, this role partners closely with the SOC and Incident Response, Vulnerability Management, Cloud Services, Endpoint Security, and GRC teams to anticipate adversary activity, inform detection and response, and guide strategic security decisions. ROLE RESPONSIBILITIESDefine and execute the cyber threat intelligence strategy, aligned to business priorities, risk tolerance, and regulatory obligations. Establish intelligence requirements focused on threats to pharmaceutical R&D, clinical operations, manufacturing, and third‑party ecosystems. Lead analysis of threat actors, campaigns, malware, and TTPs, with emphasis on nation‑state, ransomware, insider, and supply‑chain threats relevant to life sciences. Partner with SOC and Detection Engineering teams to translate intelligence into use‑case development, alert tuning, and threat‑hunting hypotheses. Support Incident Response during active investigations by providing adversary context, likely next steps, and mitigation guidance. Collaborate with Vulnerability Management to prioritize remediation based on active exploitation and threat relevance. Manage relationships with threat intelligence vendors, industry ISACs, and trusted peer communities. Serve as a trusted advisor to cyber leadership by clearly articulating threat trends, business impact, and risk implications. Define and track CTI metrics (e.g., intelligence utilization, detection impact, stakeholder satisfaction). Continuously improve intelligence processes, tooling, and integration with cyber defense workflows. Ensure CTI activities align with internal policies, data handling requirements, and ethical standards. BASIC QUALIFICATIONSBachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field, or equivalent practical experience. 4+ years of experience in cyber threat intelligence, security operations, threat detection, or related cybersecurity roles. Strong understanding of cyber threat actors, attack techniques, and intelligence analysis concepts. Experience working with threat intelligence sources, including open‑source intelligence and commercial feeds. Ability to translate technical threat intelligence into clear, actionable insights for diverse stakeholders. Strong organizational and communication skills, with the ability to manage priorities in a dynamic threat environment. Demonstrated ability to effectively manage and collaborate with global, cross‑regional teams, including flexibility to participate in meetings aligned to global time zone needs. Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach. PREFERRED QUALIFICATIONSExperience operating or supporting a formal Cyber Threat Intelligence capability within an enterprise environment. Familiarity with threat intelligence platforms, intelligence lifecycle processes, and structured analytic techniques. Knowledge of frameworks such as MITRE ATT&CK for adversary and tactic mapping. Prior experience leading or mentoring analysts or serving in a technical lead or team‑lead capacity. Experience collaborating with SOC, incident response, vulnerability management, or offensive security teams. Exposure to regulated or highly controlled environments (e.g., healthcare, life sciences, financial services). Relevant professional certifications (e.g., CISSP, CISM, GCTI, GCIH, or equivalent intelligence‑ or security‑focused credentials). WORK SCHEDULE, TRAVEL REQUIREMENTSTravel as required by the business (less than 5% domestic and/or international) Work Location Assignment: Must be able to work in assigned Pfizer office 2-3 days per week, or as needed by the business Please apply by sending your CV in English. Work Location Assignment: Hybrid Purpose Breakthroughs that change patients' lives... At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives. Digital Transformation Strategy One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience. Flexibility We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self. Let’s start the conversation! Equal Employment Opportunity We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer, Pfizer is committed to celebrating this, in all its forms – allowing for us to be as diverse as the patients and communities we serve. Together, we continue to build a culture that encourages, supports and empowers our employees. Disability Inclusion Our mission is unleashing the power of all our people and we are proud to be a disability inclusive employer, ensuring equal employment opportunities for all candidates. We encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments to support your application and future career. Your journey with Pfizer starts here! Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email disabilityrecruitment@pfizer.com. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned. To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers. Information & Business Tech