LogoFresh Jobs Ahead
Eli Lilly and Company
Eli Lilly and Company
BiotexnologiyaFarmatsevtika mahsulotlariSog‘liqni saqlash
Eli Lilly and Company retsept bilan beriladigan dori vositalarini kashf etish, ishlab chiqish, ishlab chiqarish va tijoratlashtirishga e’tibor qaratadigan ko‘p millatli farmatsevtika va sog‘liqni saqlash kompaniyasidir. Uning faoliyati diabet, onkologiya, immunologiya, nevrologiya va og‘riq kabi terapevtik yo‘nalishlarni qamrab oladi hamda tadqiqot va ishlanmalarni klinik sinovlar, tartibga solish jarayonlari, biologik va kichik molekulali dori vositalarini ishlab chiqarish hamda global tarqatish bilan birlashtiradi.
LinkedIn
Kompaniyadagi ish o‘rinlari

Senior Technical Lead, Threat Mitigation (Remote - United States)

Lead vulnerability remediation and threat mitigation programs for Eli Lilly and Company in a senior, fully remote role based in the United States. Partner with cyber, platform, application, and business teams while automating remediation workflows across the technology estate.

USAmerika Qo‘shma Shtatlari
129 000 $ – 253 000 $ / yil
MasofaviyTo‘liq stavkaSeniorTalab Qilinadigan Til: inglizchaDasturiy ta’minot muhandisiFull-stack muhandisi
Kiberxavfsizlik

Tavsif

  • Collaborate with cyber teams, platform and application owners, and business stakeholders to reduce identified vulnerability and threat impact
  • Lead organization-wide remediation campaigns for targeted risks
  • Help application teams execute cyber mitigation plans
  • Act as the technical anchor for the threat surface management squad
  • Convert vulnerability, exposure, and threat intelligence data into scoped, executable remediation campaigns
  • Set campaign ownership, targets, and delivery timelines
  • Create automation that speeds triage, deduplication, ownership assignment, and notifications during remediation
  • Monitor campaign progress, remove blockers for remediation owners, and escalate stalled or high-severity work
  • Document root causes, technical recommendations, and lessons learned to improve processes over time
  • Help platform, application, and infrastructure teams interpret mitigation requirements and complete security plans
  • Verify threat mitigation requirements in the GRC tool by validating controls, evidence, and records
  • Lead technical investigations into vulnerabilities, adversary tactics, techniques, procedures, and threat intelligence
  • Identify analyst capability gaps and help address them
  • Advance threat surface management capabilities and strategies
  • Develop strong working relationships with Cyber Defense, Identity and Access Management, Security Architecture and Engineering, and Platforms teams
  • Translate threat and remediation data into actionable guidance for cyber leaders and stakeholders

Talablar

  • Bachelor’s degree in computer science, information systems, cybersecurity, or a related field
  • At least five years of experience in threat surface management, vulnerability management, cyber defense, or a related security discipline
  • At least three years of experience scoping and completing remediation or mitigation campaigns across teams outside your direct management
  • At least three years of experience using threat intelligence and exposure data for prioritization, including CVSS, EPSS, KEV, adversary tactics, techniques, procedures, and active-exploitation reporting
  • Proven technical leadership experience, including analyst mentoring and leading in-depth technical investigations
  • Practical experience with vulnerability scanning and prioritization tools, endpoint detection and response, and security information and event management
  • Experience automating triage, deduplication, ownership assignment, or notifications within remediation workflows
  • Experience working with a cyber defense, security operations center, or threat intelligence function
  • Experience in a regulated industry with formal control validation and audit requirements
  • Strong stakeholder communication skills and the ability to turn technical threat and remediation data into decisions
  • Strong problem-solving, analytical, detail-oriented, and risk-management capabilities
  • Certifications such as CISSP, OSCP, GEVA, or an equivalent credential are preferred

Imtiyozlar

  • Company bonus that may depend partly on company and individual performance
  • Company-sponsored 401(k) plan
  • Pension benefits
  • Vacation benefits
  • Medical coverage
  • Dental coverage
  • Vision coverage
  • Prescription drug coverage
  • Flexible benefits, including healthcare and/or dependent-care flexible spending accounts
  • Life insurance and death benefits
  • Certain time-off and leave-of-absence benefits
  • Well-being benefits, including an employee assistance program, fitness benefits, and employee clubs and activities
  • Employee resource groups available to all employees

O‘xshash ish o‘rinlari