Technical Lead – Threat Mitigations

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $129k - $253k / year

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Eli Lilly and Company

WebsiteLinkedInAll Job Openings

10,000+ employees

💊 Pharmaceuticals

🏥 Healthcare

🧬 Biotechnology

💰 $6.5M Post-IPO Debt - Eli Lilly on 2024-02

Pharmaceuticals • Healthcare • Biotechnology

Eli Lilly and Company is a global pharmaceutical company that researches, develops, manufactures, and distributes prescription medicines and provides patient support services. The company focuses on life-changing medicines across conditions such as diabetes, cancer, Alzheimer’s disease, autoimmune disorders, dermatology, migraine, obesity, and sleep apnea; it runs clinical trials, offers LillyDirect pharmacy services, and emphasizes manufacturing quality, medication safety, and research into genetic medicines. Eli Lilly also provides patient resources, condition education, and access programs to help people find care and participate in trials.

📋 Description

• Intake vulnerability, exposure, and threat intelligence data from across the cyber organization • Translate data into scoped, executable burndown campaigns with owners, targets, and timelines • Develop solutions to accelerate burndown execution, including automation of triage, deduplication, ownership identification, and notification • Drive burndowns to closure by tracking progress, unblocking remediation owners, and escalating stalled or high-severity work • Capture root causes, technical recommendations, and lessons learned for durable process improvement • Help platform, application, and infrastructure teams interpret mitigation requirements and complete security plans • Confirm threat mitigation requirements in the GRC tool, including control implementation, evidence, and record accuracy • Serve as a technical resource and subject matter expert for the threat surface management analyst pool • Lead technical deep dives into vulnerabilities, adversary TTPs, and threat intelligence • Identify skill gaps and upskill mitigation analysts • Develop and refine threat surface management capabilities and strategies • Collaborate with Cyber Defense, Identity and Access Management, Security Architecture & Engineering, and Platforms • Advise cyber leadership and stakeholders by translating threat and remediation data into actionable decisions

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Systems, or Cyber Security • 5+ years of experience in threat surface management, vulnerability management, cyber defense, or a related security discipline • 3+ years of experience scoping and driving remediation or mitigation campaigns to closure across teams you do not directly manage • 3+ years of threat intelligence and exposure data, and applying it to prioritization, including CVSS, EPSS, KEV, adversary TTPs, and active exploitation reporting • Demonstrated technical leadership, including mentoring analysts and running deep technical dives • Hands-on experience with vulnerability scanning and prioritization tooling, EDR, and SIEM • Experience automating triage, deduplication, ownership identification, or notification within a remediation workflow • Experience working alongside a cyber defense, SOC, or threat intelligence function • Experience in a regulated industry with formal control validation and audit expectations • Excellent stakeholder communication and ability to translate technical threat and remediation data into decisions • Strong problem-solving and analytical skills, attention to detail, and risk management • Certifications such as CISSP, OSCP, GEVA, or equivalent preferred

🏖️ Benefits

• Company bonus depending in part on company and individual performance • Company-sponsored 401(k) • Pension • Vacation benefits • Medical, dental, vision, and prescription drug benefits • Healthcare and/or dependent day care flexible spending accounts • Life insurance and death benefits • Certain time off and leave of absence benefits • Employee assistance program • Fitness benefits • Employee clubs and activities • Employee resource groups (ERGs)