Technical Lead – Threat Mitigations

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $129k - $253k / year

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Eli Lilly and Company

WebsiteLinkedInAll Job Openings

10,000+ employees

💊 Pharmaceuticals

🏥 Healthcare

🧬 Biotechnology

💰 $6.5M Post-IPO Debt - Eli Lilly on 2024-02

Pharmaceuticals • Healthcare • Biotechnology

Eli Lilly and Company is a multinational pharmaceutical company that researches, develops, manufactures, and markets prescription medicines across multiple therapeutic areas including diabetes, oncology, immunology, neuroscience, and pain. Headquartered in Indianapolis, Indiana, Lilly is known for its extensive R&D, clinical development, and global commercialization of biologic and small-molecule drugs. The company focuses on drug discovery, clinical trials, regulatory approvals, and large-scale pharmaceutical manufacturing and distribution.

📋 Description

• Partner with internal cyber teams, platform and application owners, and business stakeholders to reduce the impact of identified vulnerabilities and threats • Drive burndowns of targeted risks across the organization • Support application teams in executing cyber mitigation plans • Serve as a technical anchor for the threat surface management squad • Intake vulnerability, exposure, and threat intelligence data and translate it into scoped, executable burndown campaigns • Define campaign owners, targets, and timelines • Develop solutions to accelerate burndon execution, including automation of triage, deduplication, ownership identification, and notification • Track progress against targets, unblock remediation owners, and escalate stalled or high-severity work • Capture root cause, technical recommendations, and lessons learned for durable process improvement • Assist platform, application, and infrastructure teams in interpreting mitigation requirements and completing security plans • Confirm implementation of threat mitigation requirements in the GRC tool by validating controls, evidence, and records • Lead technical deep dives into vulnerabilities, adversary TTPs, and threat intelligence • Identify and close analyst skill gaps • Develop and refine threat surface management capabilities and strategies • Build relationships with Cyber Defense, Identity and Access Management, Security Architecture & Engineering, and Platforms teams • Advise cyber leadership and stakeholders by translating threat and remediation data into actionable decisions

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Systems, or Cyber Security • 5+ years of experience in threat surface management, vulnerability management, cyber defense, or a related security discipline • 3 years+ experience scoping and driving remediation or mitigation campaigns to closure across teams you do not directly manage • 3 years+ of threat intelligence and exposure data, and how to apply it to prioritization, including CVSS, EPSS, KEV, adversary TTPs, and active exploitation reporting • Demonstrated technical leadership, including mentoring analysts and running deep technical dives • Hands-on experience with vulnerability scanning and prioritization tooling, EDR, and SIEM • Experience automating triage, deduplication, ownership identification, or notification within a remediation workflow • Experience working alongside a cyber defense, SOC, or threat intelligence function • Experience in a regulated industry with formal control validation and audit expectations • Excellent stakeholder communication and ability to translate technical threat and remediation data into decisions • Strong problem-solving, analytical, detail-orientation, and risk-management skills • Certifications such as CISSP, OSCP, GEVA, or equivalent are preferred

🏖️ Benefits

• Company bonus depending, in part, on company and individual performance • Company-sponsored 401(k) • Pension • Vacation benefits • Medical benefits • Dental benefits • Vision benefits • Prescription drug benefits • Flexible benefits, including healthcare and/or dependent day care flexible spending accounts • Life insurance and death benefits • Certain time off and leave of absence benefits • Well-being benefits, including employee assistance program, fitness benefits, and employee clubs and activities • Employee resource groups open to all employees