Cyber Intrusion Response Analyst Undergraduate

Cyber Intrusion Response Analyst Undergraduate

Global Information Security, Pfizer Digital Intrusion Detection & Analysis

Who can apply?

Applicants must be completing a placement as part of a degree course at a UK University, either through Year in Industry/Industrial Placement or Gap Year.

Please note that we will only consider candidates who have applied by completing the Pfizer Placement Application Form. Candidates who do not complete and attach the application form will NOT be considered.

To learn more about this exciting opportunity, please see below:

Department Overview

The Pfizer Digital Global Information Security (GIS) team delivers three core capabilities for Pfizer – Intrusion Detection & Analysis, Threat Intelligence, and Forensics. GIS secures Pfizer’s most important information assets through world-class controls and protections.

What can I achieve and what will I be accountable for whilst completing a placement at Pfizer?

Cyber Intrusion Analysts will sit within the Intrusion Detection & Analysis team based in Sandwich, Kent and respond to network security events to build a deep understanding of computer network attacks against Pfizer’s global enterprise. Cyber Intrusion Analysts will be expected to perform event correlation across large datasets, perform attack lifecycle analysis, develop remediation plans, implement proactive and reactive countermeasures, and create innovative solutions to security issues.

You will have the opportunity to:

• Leverage security data from internal sensors (IDS, Firewall, SIEM, Proxy, hosts) and external sources (Industry portals, threat intel feeds) to identify high priority alerts and perform attack life-cycle analysis to develop/implement proactive mitigations.
• Review security incidents and alerts; establish their severity and impact to the Pfizer enterprise along with detailed response actions.
• Gain experience using some of the world’s best security products deployed across a very large and distributed corporate network.
• Contribute to new process creation and improvement by developing internal Tactics, Techniques, and Procedures (TTPs) for analysis, establishing reporting criteria, structure, and operational reports.
• Conduct and document your analysis of many different attack methodologies pertaining to real attacks against the corporate network, including:
  • Suspicious emails, URLs and macro-enabled Office documents.
  • Suspicious outbound network traffic to suspected C2 infrastructure.
  • Forensic examination of artifacts on potentially compromised Windows systems.
  • Deep level analysis of suspicious executable code using static and dynamic methods.
• Contribute to the development and implementation of threat mitigation techniques using such solutions as Python, yara, Snort, Splunk, proprietary endpoint protection rules and more.

What other opportunities and benefits do Pfizer offer?

There will be opportunities to spend time working with other groups within the Global Information Security team, e.g., Threat Intel, Digital Forensics & User Awareness. There may also be opportunities to attend external cyber-related events.

When can I start?

Placements will start on 1st September 2025 and will run for 12 months.

PERSON SPECIFICATION

Type of person we are looking for, in relation to ‘Skills’, ‘Knowledge’ and ‘Motivation’:

• Completing placement as part of University Degree either through Year In Industry/Industrial Placement or Gap Year.
• On target for a Degree Classification.
• A genuine interest in pursuing a technical role in the cyber security field.
• Excellent written and communication skills.
• The motivation and resilience to make the most of this opportunity.

As a reminder…….

This position will close for applications on 3rd November 2024.

Please note that we only accept application forms. Please do not send over your CV or cover letter as they will not be considered.

#LI-PFE