ROLE SUMMARY

The Global Information Security (GIS) organization delivers proactive cyber defense for the global Pfizer enterprise.  Our mission is to secure all of Pfizer’s information assets ranging from the manufacturing floor to the core data centers and out to the patient facing solutions. We achieve this mission through a team of world-class talent, utilizing top-tier technologies, advanced analytics and the promotion of a cybersecurity ownership culture across the company.

In this role, we are looking for emerging cybersecurity talent driven to proactively design and implement cybersecurity network protection solutions with agility, quality and speed, make data driven decisions, automate routine tasks, continuously improve and maximize the value and effectiveness of security solution defenses.

For Pfizer, we look for candidates that are motivated, self-learning, and team-oriented individuals.  From a technical perspective, an ideal candidate would have the skills shown below, but candidates that possess a strong subset and an attitude towards self-development & growth will be considered.

ROLE RESPONSIBILITIES

This role will have the following primary responsibilities, but will often act under the support and direction of the Senior Manager, Cybersecurity Network Protection Lead:

• Analyze business requirements and provide recommendations for building scalable solutions to meet security functional and non-functional requirements

• Build and operationalize solutions to deploy and protect the network. Define and configure security policies throughout the various network boundaries

• Create and maintain documentation related to network solutions; this may include conceptual, logical, and physical diagrams; new environment design documents; write ups on technical capabilities and solution configurations; etc. 
• Perform continuous security policy analysis to ensure effectiveness of security defenses.
• Develop analytics/Analyze data to improve situational awareness and make informed decisions.
• Assist with the development and operation of both infrastructure-as-code as well as manual change tracking processes
• Manage small to medium security enhancement and remediation projects.

• Demonstrate commitment to training, self-study and maintaining proficiency in the technical cyber security domain.
• Demonstrate effective oral, written, and interpersonal communications skills as well as organizational and planning abilities.

BASIC QUALIFICATIONS

• BS in Computer Sciences, Information Security, Information Systems, Engineering, Sciences, or related field.
• Technical experience with network solutions; either infrastructure or security related.
• Understanding of network traffic with security controls in mind.
• Understanding of network technology.
• Ability to onboard, learn and adapt to new technologies
• Foundational knowledge of malware operation and indicators or threat, current threat landscape (threat actors, APT, cyber-crime, etc)
• Demonstrated ability to work in ambiguous situations and initiate technical aptitude to understand/design solutions.
• Strong critical thinking and problem-solving abilities.
• Ability to prioritize and execute with minimal direction or oversight.
• Concise, accurate communication skills (both verbal and written).
• Ability to work both independently and in a team-oriented, collaborative environment.
• Demonstrated commitment to training, self-study and maintaining proficiency in the technical cyber security domain.
• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• 3+ years of experience with network security, cyber network defense, or cyber incident response
• Experience performing raw data analysis using a log repository or SIEM.
• Experience managing policy and configuration via Infrastructure-As-Code
• Experience and resolving network connectivity issues where multiple layers of host and network-based firewall and/or IPS solutions may be involved
• Experience engineering preventative solutions to address specific vulnerabilities or adversary techniques
• Experience designing policy within a modern next-generation firewall

LI#PFE