This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Cyber Threat Intelligence Analyst (CTI) plays a vital role in enhancing Amgen’s cyber defense posture by identifying, analyzing, and disseminating intelligence related to cyber threats. This role is responsible for gathering and correlating information from various internal and external sources to provide actionable insights that help prevent, detect, and mitigate cybersecurity risks. The CTI analyst partners with SOC, incident response, and threat hunting teams to proactively identify indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and emerging threat actors targeting the healthcare and biotech sectors. This role also contributes to the development of threat models, intelligence reports, and executive briefings.
Job Responsibility
Collect, analyze, and assess cyber threat intelligence from open-source intelligence (OSINT), commercial feeds, government sources, and internal telemetry
Develop and maintain profiles of threat actors, their capabilities, infrastructure, and campaigns relevant to Amgen’s industry
Produce actionable intelligence reports, threat advisories, and strategic briefings for technical teams and senior stakeholders
Correlate threat intelligence with internal events to support investigations and improve detection capabilities
Assist in the enrichment of threat hunting and incident response efforts by providing contextual intelligence and TTP mapping
Track geopolitical and sector-specific threats to anticipate risks that could affect business operations
Collaborate with SOC and engineering teams to improve detection rules and defense mechanisms based on threat intelligence findings
Maintain situational awareness of the cyber threat landscape and emerging risks to healthcare, life sciences, and biotechnology sectors
Support the configuration and maintenance of threat intelligence platforms (TIPs) and threat feed integrations
Contribute to purple team and threat emulation exercises to validate defensive controls and response capabilities
Requirements
Master’s degree in Cybersecurity, Information Technology, Intelligence Studies, or related field OR Bachelor’s degree with 1 year of experience in Cyber Threat Intelligence, Threat Hunting, or a similar security role OR Diploma with 2 years of relevant experience in threat intelligence or related cybersecurity functions
Strong understanding of the cyber threat landscape, adversary tactics (MITRE ATT&CK), and threat actor methodologies
Experience conducting intelligence analysis using OSINT, dark web monitoring, threat reports, and threat intelligence platforms
Ability to write concise, impactful threat intelligence reports tailored to various audiences
Familiarity with cyber kill chain, diamond model, and intelligence lifecycle
Basic scripting knowledge (Python, PowerShell) to support enrichment and automation of threat intelligence
Nice to have
Experience in healthcare, pharmaceutical, or biotech threat landscape
Knowledge of threat intelligence standards (STIX/TAXII)
Understanding of malware families and APT group behaviors
Experience with TIPs (e.g., MISP, Anomali, ThreatConnect)
Ability to brief senior leadership on strategic and operational threats
What we offer
Work That Matters – Build tech that accelerates scientific breakthroughs and helps patients worldwide
Modern Tech Stack – Cloud-first, automation-focused, AI-powered
Global Scale, Agile Mindset – Collaborate across continents while working in nimble, high-impact teams
Continuous Learning – Access to certifications, trainings, mentorship, and career mobility
AMGEN Total Rewards Plan – Comprehensive benefits in healthcare, finance, and well-being
Flexibility – Hybrid work model with time split between our Lisbon office and remote work