Associate, Security Automation Developer

ROLE SUMMARY

The Global Information Security (GIS) organization delivers proactive cyber defense for the global Pfizer enterprise.  Our mission is to secure all of Pfizer’s digital information assets ranging from the manufacturing floor to the core data centers, and out to our patient facing solutions.  We achieve this mission through a team of world-class talent that focuses on building a strong partnership with the business to build security into all aspects of our business.  Across all aspects of our organization, we utilize top-tier technologies, industry leading best practices, advanced analytics, and the promotion of a cybersecurity ownership culture across the company.

The Associate Security Automation Developer is accountable for ensuring the Information Security Awareness and Response (ISAR) team maintains operational excellence, by developing automations, ensuring the code is operational, and the outcomes are measurable and reliable.  This role will be responsible for identifying, implementing, and managing the platforms used to support ISAR automated data collections, processing, analysis, delivery, and reporting.

ROLE RESPONSIBILITIES

The Associate Security Automation Developer will assist in automation/playbook development to ensure efficient access and execution of the DFIT process/capabilities.

• Develop, design, and maintain automations in various DFIT platforms/tools via their APIs, which includes data collection, processing, and delivery of data.

• Identify process improvement and develop internal procedures for data collection, automated processes, reporting criteria, and metrics.

• Clear and concise documentation and testing for all custom-built code/integrations.

• Collaborate with the Operations team, along with cross-unit and cross-divisional teams, while maintaining poise and composure in difficult situations, with a professional attitude.

• Candidate will be required to stay up to date with current digital forensic / eDiscovery technologies and capabilities.

REQUIRED QUALIFICATIONS

• Bachelor’s degree in Computer Sciences, Information Security, Information Systems, Engineering, Sciences, no professional experience required; OR Associate's degree with four years of relevant experience; OR Six years of relevant experience with a high school diploma or equivalent 

• Experience in the following areas:

  • Software development experience in Python and/or Java, with application servers, relational databases, message queues, REST/JSON and SOAP web services.

  • Experience developing applications that integrate between multiple systems is a strong plus.  Key technologies here: SOAP or REST or other APIs; message queues (ActiveMQ, STOMP, AMQP, MQSeries, RabbitMQ).

• Demonstrated experience researching and solving challenging technical issues.

• Highly detail-oriented, organized, proactive, efficient, and resourceful with exceptional follow-through skills.

• Ability to simultaneously manage workloads, multiple customer demands, and shifting priorities within a fast-paced, rapidly evolving environment.

• Ability to communicate expectations with key stakeholders and team members.

• Ability to work with a cross-functional team.

PREFERRED QUALIFICATIONS

• Agile methodology experience

• Experience developing playbooks in a Security Orchestration, Automation, and Response (SOAR) platform.

• Strong application and infrastructure knowledge. E.g., PostgresSQL, git, bash and PowerShell scripting, SSL/TLS certificates, SAM, IMAP, LDAP, Active Directory, SSO.

• Experience and knowledge in the following are preferred:

  • Experience performing forensic analysis /incident response.

  • Familiarity with Windows, Macintosh, and Linux operating systems.

  • Familiarity with computer system hardware and software installation.

  • Familiarity with forensic and incident response tools and applications used to perform various types of analysis (EnCase, Nuix, FTK, Redline, SIFT Workstation, Log2Timeline, etc.)

  • Familiarity understanding of the life cycle of network threats, attacks, attack vectors, and methods of exploitation to conduct analysis across forensic evidence, log data, compromised hosts, and network traffic

  • Showcase applicable experience in forensic technologies related to Data Collection and Processing

PHYSICAL/MENTAL REQUIREMENTS

This is a desk job.

Flexible home working.

NON-STANDARD WORK SCHEDULE, TRAVEL OR ENV