About Our Client
Our client is a global biopharmaceutical innovator dedicated to developing groundbreaking medicines that address high unmet medical needs. Driven by cutting-edge science and a commitment to patient impact, they foster a collaborative, tech-forward environment across their international operations. In this role, you will help safeguard critical infrastructure and research systems that protect vital health advancements worldwide.
The Opportunity
Are you a proactive defender who loves connecting the dots behind adversary behavior? We are looking for an ambitious Security Analyst to join a high-impact Security & Compliance team.
In this dynamic role, you will work side-by-side with Senior Security Analysts and global security leadership to hunt for hidden threats, analyze complex attack paths, participate in occasional red team/pentesting exercises, and drive exposure management across a modern enterprise infrastructure. If you thrive on threat telemetry, investigative analysis, and staying two steps ahead of real-world attackers, this is your chance to sharpen your skills at a global scale.
What You’ll Do
Hunt & Investigate: Execute hypothesis-driven threat hunts across endpoint, identity, cloud, and network telemetry to uncover sophisticated adversary activity.
Respond to Incidents: Collaborate with senior leadership and cross-functional teams (SOC, Privacy, Legal, IT) during high-priority security events.
Exposure & Vulnerability Management: Leverage the Threat & Exposure Management framework to identify misconfigurations, analyze attack paths, prioritize vulnerabilities, and route them for remediation.
Map Adversary Tradecraft: Analyze attacker tactics and techniques using the MITRE ATT&CK framework and live threat intelligence.
Red Team Collaboration: Support occasional red team and penetration testing exercises to validate defenses and identify chained weaknesses.
Actionable Insights: Turn threat intelligence and hunt findings into concrete detection logic, response playbooks, and clear executive documentation.
What We’re Looking For
Experience: 3+ years in Threat Intelligence, Threat Hunting, or Incident Response within enterprise environments.
Technical Mastery: Hands-on experience with EDR platforms, SIEM/log analytics tools, and a solid understanding of vulnerability exploitation, exposure management, and attack path analysis.
Threat Knowledge: Deep understanding of modern intrusion techniques, attacker tradecraft, and telemetry correlation.
Mindset: Strong critical thinking under pressure, high autonomy, and effective communication skills to translate complex technical findings for non-technical stakeholders.
Education: Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experience.
Nice-to-Haves / Certifications:
GIAC: GCIA, GCIH, GCED, GCIR, GNFA, GCFA
Offensive / Red Team: OSCP, OSCE, CRTO, CRTP, CRTA
DFIR: CFCE, EnCE, or related specialized credentials