Digital Forensics

Role Summary

The Global Information Security (GIS) organization delivers proactive cyber defense for the global Pfizer enterprise. Our mission is to secure all of Pfizer’s digital information assets ranging from the manufacturing floor, to the core data centers, and out to our patient facing solutions. We achieve this mission through a team of world-class talent that focuses on building a strong partnership with the business to build security into all aspects of our business. Across all aspects of our organization, we utilize top-tier technologies, industry leading best practices, advanced analytics and the promotion of a cybersecurity ownership culture across the company.

The Digital Forensics & Insider Threat (DFIT) Analyst is accountable for responding to DFIT alerts or investigation requests throughout the world. This role will be require responding to high-priority information security alerts, conduct event correlation, perform attack lifecycle analysis, and develop proactive mitigations that enable a defense-in
- depth posture for the Pfizer environment.

Role Responsibilities
- Work with internal customers to plan and execute forensic support for both simple and complex investigations
- Collect, process, and analyze electronically stored information (ESI) obtained from network, cloud and end user digital sources in accordance with Forensic industry standards, including chain of custody procedures and evidence handling
- Determine tools and procedures required to complete the assigned task
- Ability to clearly and thoroughly document the repeatable actions taken during your analysis and have a strong attention to detail
- Provide written and verbal status updates to customers and generate formal forensic analysis reports in a clear and concise manner
- Participate in the Forensic Investigation Triage (FIT) process, triaging and prioritizing new requests and alert tickets
- Use of industry standard digital forensic tools (such as EnCase, Nuix, Axiom, Cellebrite, and Oxygen, among others)
- Suggest and develop proactive mitigations that enable a defense-in-depth posture for the Pfizer environment
- Participate, support, and manage projects including research, testing, and validating findings
- Conduct peer reviews of other examiners findings and work product
- Respond to investigative requests on short notice, which may require domestic and international travel, and working during extended hours, weekends, and holidays
- As part of a global team there may be times that require working outside normal business hours to attend meetings, case activities and complete projects
- Maintain forensic certifications and ability to provide expert testimony

**Qualifications**:
Must-Have
- Bachelor’s Degree, preferably in Computer Science, Information Security, Cyber Security, Digital Forensics, or commensurate professional experience
- Minimum 2 years of work experience related to digital forensics
- Strong understanding of industry standard digital forensic tools (such as EnCase, Nuix, Axiom, Cellebrite, and Oxygen, among others)
- Demonstrated ability to work in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach

Nice-to-Have
- One or more of the following certifications: CCE, EnCE, CFCE, GCFE, GCFA, or equivalent, is desirable
- Experience using physical, local, and remote acquisition tools across multiple operating systems, to include mobile
- Outstanding communication skills, including the ability to write and verbally articulate industry terminology to interact at a technical level, management level and senior executive level
- Experience in effective and efficient time and resource management
- Capable of independently handling complex, large volume, and previously un
- encountered situations and examinations
- Ability to manage multiple concurrent investigations and projects with mínimal supervision and be able prioritize assigned tasks
- Ability to work both independently and in a team-oriented, collaborative environment and the ability to set and manage expectations with key stakeholders and team members

PHYSICAL/MENTAL REQUIREMENTS
- This is a desk job.
- Flexible home working.

NON-STANDARD WORK SCHEDULE, TRAVEL OR ENVIRONMENT REQUIREMENTS
- Standard work schedule & 10% travels required.
- Forensic support globally which may require unsocial hours to address matters or attend meetings in different time zones.
- Work Location Assignment: Hybrid: hybrid colleagues must be able to work in Pfizer office 2-3 days per week, or as needed by the business to connect and innovate with their team face-to-face. However, they also benefit from being able to work offsite regularly when it makes business sense to do so.

Other Job Details:

- Last day to apply: June 06, 2024
- Alternative locations: Bothell, WA

Relocation assistance may be available based on business needs and/or eligibility.
Sunshine Act
Pfizer repo