Senior Digital Forensic Analyst

ROLE SUMMARY

 

Our Global Cyber Defense team is responsible for safeguarding Pfizer's digital assets and infrastructure through proactive threat detection, incident response, and risk mitigation across on-premises, cloud, and hybrid environments.

 

As a Senior Digital Forensics & Insider Threat (DFIT) Analyst to join DFIT team within Pfizer's Global Cyber Defense organization. In this role, you will be at the forefront of protecting Pfizer's most critical digital assets, leading investigations and responding to insider threat alerts on a global scale. You will bring deep expertise in digital forensic analysis, security investigations, and the ability to operate with precision and confidence across complex business and technical environments.

 

 

ROLE RESPONSIBILITIES

• Collaborate with internal customers to plan and execute forensic support for investigations, ranging from simple to complex cases.
• Collect, process, and analyze electronically stored information (ESI) from various digital sources, including networks, cloud platforms, and end-user devices, adhering to forensic industry standards and maintaining chain of custody.
• Produce accurate, repeatable case documentation and deliver clear written and verbal reports and status updates to customers
• Participate in the Forensic Investigation Triage process, prioritizing new requests and alert tickets to ensure timely response and resolution.
• Use of industry standard digital forensic tools (such as EnCase, FTK, NUIX, Axiom, Cellebrite, X-Ways and Oxygen).
• Leverage SOC tooling including SIEM platforms and SOAR solutions to detect, investigate, and respond to security incidents and insider threat alerts in a timely and effective manner, including risks arising from enterprise AI use and emerging AI-driven threat vectors.
• Apply data protection and insider threat technologies to monitor, investigate, and remediate potential data loss and policy violations across the enterprise.

• Utilize Agile methodology to plan, manage, and execute projects, ensuring efficient workflow, timely delivery, and high-quality results.

• Manage multiple concurrent investigations and projects with minimal supervision, prioritizing tasks effectively while working both independently and collaboratively across teams, and setting clear expectations with key stakeholders

• Conduct peer reviews of findings and work products from other examiners to ensure accuracy and quality.

• Respond to investigative requests at short notice, which may require domestic and international travel, and working during extended hours. In exceptional instances this may include weekends and holidays,

• As part of a global team there may be times that require working outside normal business hours to attend meetings, case activities and complete projects.

• Maintain forensic certifications to ensure continued professional standing.
   

BASIC QUALIFICATIONS

• Bachelor’s Degree, preferably in Computer Science, Information Security, Cyber Security, Computer Forensics or commensurate professional experience.
• 3+ years of experience in Digital Forensics within Law Enforcement or within a corporate environment.
• One or more of the following certifications: EnCE, CFCE, GCFE, GASF or GCFA.
• Strong understanding of industry standard digital forensic tools (such as EnCase, FTK, NUIX, Axiom, Cellebrite, X-Ways, Oxygen).
• Experience using physical, local, and remote acquisition tools across multiple OS systems.
• Proficiency with industry-standard SOC tooling, including SIEM and SOAR platforms, to support threat detection, investigation, and incident response.
• Demonstrated experience with data protection and insider threat technologies, with a strong understanding of cloud security, data loss prevention, and user activity monitoring solutions across enterprise environments.
• Familiarity with AI-generated risk and the ability to investigate and respond to AI tool usage within an enterprise environment.
• Understanding of European General Data Protection Regulation (GDPR) or European/Global Privacy laws and related laws in APAC region.
• Outstanding communication skills, including the ability to write and verbally articulate industry terminology to interact at a technical level, management level and senior executive level.
• Experience in effective and efficient time and resource management.
• Apply appropriate technologies across diverse examinations while driving continuous improvements in service delivery efficiency and consistency.
• Mobile device and memory forensic analysis experience would be beneficial.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

 

 
Work Location Assignment: Hybrid


Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email [email protected]. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned.



To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.


Information & Business Tech

ROLE SUMMARY

 

Our Global Cyber Defense team is responsible for safeguarding Pfizer's digital assets and infrastructure through proactive threat detection, incident response, and risk mitigation across on-premises, cloud, and hybrid environments.

 

As a Senior Digital Forensics & Insider Threat (DFIT) Analyst to join DFIT team within Pfizer's Global Cyber Defense organization. In this role, you will be at the forefront of protecting Pfizer's most critical digital assets, leading investigations and responding to insider threat alerts on a global scale. You will bring deep expertise in digital forensic analysis, security investigations, and the ability to operate with precision and confidence across complex business and technical environments.

 

 

ROLE RESPONSIBILITIES

• Collaborate with internal customers to plan and execute forensic support for investigations, ranging from simple to complex cases.
• Collect, process, and analyze electronically stored information (ESI) from various digital sources, including networks, cloud platforms, and end-user devices, adhering to forensic industry standards and maintaining chain of custody.
• Produce accurate, repeatable case documentation and deliver clear written and verbal reports and status updates to customers
• Participate in the Forensic Investigation Triage process, prioritizing new requests and alert tickets to ensure timely response and resolution.
• Use of industry standard digital forensic tools (such as EnCase, FTK, NUIX, Axiom, Cellebrite, X-Ways and Oxygen).
• Leverage SOC tooling including SIEM platforms and SOAR solutions to detect, investigate, and respond to security incidents and insider threat alerts in a timely and effective manner, including risks arising from enterprise AI use and emerging AI-driven threat vectors.
• Apply data protection and insider threat technologies to monitor, investigate, and remediate potential data loss and policy violations across the enterprise.

• Utilize Agile methodology to plan, manage, and execute projects, ensuring efficient workflow, timely delivery, and high-quality results.

• Manage multiple concurrent investigations and projects with minimal supervision, prioritizing tasks effectively while working both independently and collaboratively across teams, and setting clear expectations with key stakeholders

• Conduct peer reviews of findings and work products from other examiners to ensure accuracy and quality.

• Respond to investigative requests at short notice, which may require domestic and international travel, and working during extended hours. In exceptional instances this may include weekends and holidays,

• As part of a global team there may be times that require working outside normal business hours to attend meetings, case activities and complete projects.

• Maintain forensic certifications to ensure continued professional standing.
   

BASIC QUALIFICATIONS

• Bachelor’s Degree, preferably in Computer Science, Information Security, Cyber Security, Computer Forensics or commensurate professional experience.
• 3+ years of experience in Digital Forensics within Law Enforcement or within a corporate environment.
• One or more of the following certifications: EnCE, CFCE, GCFE, GASF or GCFA.
• Strong understanding of industry standard digital forensic tools (such as EnCase, FTK, NUIX, Axiom, Cellebrite, X-Ways, Oxygen).
• Experience using physical, local, and remote acquisition tools across multiple OS systems.
• Proficiency with industry-standard SOC tooling, including SIEM and SOAR platforms, to support threat detection, investigation, and incident response.
• Demonstrated experience with data protection and insider threat technologies, with a strong understanding of cloud security, data loss prevention, and user activity monitoring solutions across enterprise environments.
• Familiarity with AI-generated risk and the ability to investigate and respond to AI tool usage within an enterprise environment.
• Understanding of European General Data Protection Regulation (GDPR) or European/Global Privacy laws and related laws in APAC region.
• Outstanding communication skills, including the ability to write and verbally articulate industry terminology to interact at a technical level, management level and senior executive level.
• Experience in effective and efficient time and resource management.
• Apply appropriate technologies across diverse examinations while driving continuous improvements in service delivery efficiency and consistency.
• Mobile device and memory forensic analysis experience would be beneficial.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

 

 
Work Location Assignment: Hybrid


Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email [email protected]. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned.



To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.


Information & Business Tech