Novartis
Healthcare
DefensiveCyberSecurityResearcher
Neural analysis suggests this role is
optimal for Director candidates.
“Defensive Cyber Security Researcher at Novartis. Skills: Cyber Security Research, Threat Hunting, Malware Analysis, AI Security. Hunt for emerging threats. Dissect threats”
Industry & Context.
Root cause analysis
What They're Looking For.
Must Have
5+ years Incident Response, 5+ years malware investigations, Critical understanding cyber attacker kills chain, High familiarity Active Directory, High familiarity Entra ID, High familiarity Azure AD security, Solid understanding AI security risks, Proven ability work with SOC teams, Experience working with CTI teams, Good familiarity Red Teaming tools, Advanced programming skills scripting languages, Familiarity nation-state threat landscape
Nice to Have
Relevant Technical Security Certifications
What You'll Do.
Hunt for emerging threats
Extract indicators of compromise
Demonstrate adversary tactics
Analyze malicious activity
Participate in hunting missions
Eradicate threat actors
Provide analytic investigative support
Perform incident analysis
Enhance alert performance
Perform malware reverse
Perform memory forensics
Perform disk forensics
Produce technical reports
Review detection alerts
Recommend improvements
Identify potential threats
Identify suspicious activity
Identify anomalous activity
Research AI security risks
Assess AI security risks
Develop defensive guidance
Develop detection rules
Collaborate with CTI teams
Operationalize intelligence feeds
Enrich hunting missions
Contribute research outputs
How You'll Work.
Team & Collaboration
Security Operations Center; Cyber Threat Intelligence teams
Communication Scope
Oral communication; Written communication
Full Job Description
**Job Description Summary** Location: Tel-Aviv, Israel #LI-Hybrid 3 days/week in office Internal job title: Assoc. Dir. DDIT ISC Security Research About the role: The Defensive Cyber Security Researcher will be part of a new Think Tank group of security researchers that will challenge Novartis information security defenses, application security and data protection. The Defensive Cyber Security Researcher will be responsible for participating in threat actor based investigations, creating new detection methodology and providing expert support to incident response and monitoring functions. The focus of the Defensive Cyber Security Researcher is to detect, disrupt and eradicate threat actors from enterprise networks, including emerging AI-driven and AI-assisted threats. To execute this mission, the Defensive Cyber Security Researcher will use data analysis, threat intelligence, and cutting-edge security technologies — with a growing emphasis on understanding how AI can be weaponized against the organization and how it can be leveraged defensively. The Defensive Cyber Security Researcher will identify and analyze patterns and changes in tactics, techniques and procedures used by attackers to attack Novartis IT infrastructure and management staff. The analysis will result in indicators of compromise, accurate understanding of the risk to Novartis IT infrastructure and prioritization of remediation efforts. **Job Description** **Key Responsibilities:** * Hunt through huge number of signals to identify new emerging threats, dissect them and extract meaningful insights and indicators of compromise. * Demonstrate adversary tactics to recognize and analyze malicious activity (techniques, tools and processes) based on a combination of behavioral activity and signature based analysis. * Participate in "hunting missions" using threat intelligence, analysis of anomalous log data and results of brainstorming sessions to detect and eradicate threat actors on the Novartis network. *
Applying for this Defensive Cyber Security Researcher role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about Novartis?
Real rants from real employees. Read before you apply.