Senior Digital Forensics & Insider Threat (DFIT) Analyst

Our Global Cyber Defense team is responsible for safeguarding Pfizer's digital assets and infrastructure through proactive threat detection, incident response, and risk mitigation across on-premises, cloud, and hybrid environments.

As a Senior Digital Forensics & Insider Threat (DFIT) Analyst to join DFIT team within Pfizer's Global Cyber Defense organization, you will be at the forefront of protecting Pfizer's most critical digital assets, leading investigations and responding to insider threat alerts on a global scale.

Role Responsibilities

• Collaborate with internal customers to plan and execute forensic support for investigations, ranging from simple to complex cases.
• Collect, process, and analyze electronically stored information (ESI) from various digital sources, including networks, cloud platforms, and end-user devices, adhering to forensic industry standards and maintaining chain of custody.
• Produce accurate, repeatable case documentation and deliver clear written and verbal reports and status updates to customers.
• Participate in the Forensic Investigation Triage process, prioritizing new requests and alert tickets to ensure timely response and resolution.
• Use industry standard digital forensic tools (such as EnCase, FTK, NUIX, Axiom, Cellebrite, X-Ways and Oxygen).
• Leverage SOC tooling including SIEM platforms and SOAR solutions to detect, investigate, and respond to security incidents and insider threat alerts in a timely and effective manner.
• Apply data protection and insider threat technologies to monitor, investigate, and remediate potential data loss and policy violations across the enterprise.
• Utilize Agile methodology to plan, manage, and execute projects, ensuring efficient workflow, timely delivery, and high-quality results.
• Manage multiple concurrent investigations and projects with minimal supervision, prioritizing tasks effectively while working both independently and collaboratively across teams.
• Conduct peer reviews of findings and work products from other examiners to ensure accuracy and quality.
• Respond to investigative requests at short notice, which may require domestic and international travel, and working during extended hours.
• Maintain forensic certifications to ensure continued professional standing.

Basic Qualifications

• Bachelor’s Degree, preferably in Computer Science, Information Security, Cyber Security, Computer Forensics or commensurate professional experience.
• 3+ years of experience in Digital Forensics within Law Enforcement or within a corporate environment.
• One or more of the following certifications: EnCE, CFCE, GCFE, GASF or GCFA.
• Strong understanding of industry standard digital forensic tools (such as EnCase, FTK, NUIX, Axiom, Cellebrite, X-Ways, Oxygen).
• Experience using physical, local, and remote acquisition tools across multiple OS systems.
• Proficiency with industry-standard SOC tooling, including SIEM and SOAR platforms, to support threat detection, investigation, and incident response.
• Demonstrated experience with data protection and insider threat technologies, with a strong understanding of cloud security, data loss prevention, and user activity monitoring solutions across enterprise environments.
• Familiarity with AI-generated risk and the ability to investigate and respond to AI tool usage within an enterprise environment.
• Understanding of European General Data Protection Regulation (GDPR) or European/Global Privacy laws and related laws in APAC region.
• Outstanding communication skills, including the ability to write and verbally articulate industry terminology to interact at a technical level, management level and senior executive level.