Lead Analyst, Cyber Threat Intelligence

We are the 1st Hub for Developers! Our motto is “From Developers to Developers”! Our vision is to provide real career opportunities for candidates that want to take the next step in their career. Code.Career is the first process that you will speak with developers (only!) and tech (freak) experts!

Our client, is one of the world’s leading biopharmaceutical companies, dedicated to discovering, developing, and delivering innovative medicines and vaccines that improve and extend patients’ lives. With a presence in more than 100 countries and a history spanning over 175 years, our client combines cutting-edge science, technology, and global expertise to address some of the world’s most challenging healthcare needs. The company fosters a culture of innovation, collaboration, and continuous learning, empowering its people to drive breakthroughs that make a meaningful impact on global health.

Join a global leader in pharmaceuticals, and immerse yourself in a dynamic experience where you’ll contribute to groundbreaking projects that impact the lives of millions!

Key Responsibilities

• Define and execute the cyber threat intelligence strategy, aligned to business priorities, risk tolerance, and regulatory obligations.
• Establish intelligence requirements focused on threats to pharmaceutical R&D, clinical operations, manufacturing, and third‑party ecosystems.
• Lead analysis of threat actors, campaigns, malware, and TTPs, with emphasis on nation‑state, ransomware, insider, and supply‑chain threats relevant to life sciences.
• Partner with SOC and Detection Engineering teams to translate intelligence into use‑case development, alert tuning, and threat‑hunting hypotheses.
• Support Incident Response during active investigations by providing adversary context, likely next steps, and mitigation guidance.
• Collaborate with Vulnerability Management to prioritize remediation based on active exploitation and threat relevance.
• Manage relationships with threat intelligence vendors, industry ISACs, and trusted peer communities.
• Serve as a trusted advisor to cyber leadership by clearly articulating threat trends, business impact, and risk implications.
• Define and track CTI metrics (e.g., intelligence utilization, detection impact, stakeholder satisfaction).
• Continuously improve intelligence processes, tooling, and integration with cyber defense workflows.
• Ensure CTI activities align with internal policies, data handling requirements, and ethical standards.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field, or equivalent practical experience.
• 4+ years of experience in cyber threat intelligence, security operations, threat detection, or related cybersecurity roles.
• Strong understanding of cyber threat actors, attack techniques, and intelligence analysis concepts.
• Experience working with threat intelligence sources, including open‑source intelligence and commercial feeds.
• Ability to translate technical threat intelligence into clear, actionable insights for diverse stakeholders.
• Strong organizational and communication skills, with the ability to manage priorities in a dynamic threat environment.
• Demonstrated ability to effectively manage and collaborate with global, cross‑regional teams, including flexibility to participate in meetings aligned to global time zone needs.
• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

Nice-to-Have Skills

• Experience operating or supporting a formal Cyber Threat Intelligence capability within an enterprise environment.
• Familiarity with threat intelligence platforms, intelligence lifecycle processes, and structured analytic techniques.
• Knowledge of frameworks such as MITRE ATT&CK for adversary and tactic mapping.
• Prior experience leading or mentoring analysts or serving in a technical lead or team‑lead capacity.
• Experience collaborating with SOC, incident response, vulnerability management, or offensive security teams.
• Exposure to regulated or highly controlled environments (e.g., healthcare, life sciences, financial services).
• Relevant professional certifications (e.g., CISSP, CISM, GCTI, GCIH, or equivalent intelligence‑ or security‑focused credentials).

Upon further discussion with our client.