Eli Lilly and Company

Security Engineer

Eli Lilly and Company

full-time

Posted on:

Origin:  • 🇺🇸 United States

Visit company website
AI Apply
Manual Apply

Salary

💰 $63,750 - $180,400 per year

Job Level

Mid-LevelSenior

Tech Stack

CloudCyber Security

About the role

  • Participate in threat modeling sessions and document risks, mitigations, and recommendations
  • Consult on security control design and validate effectiveness during system development and testing
  • Support security operations and consulting by contributing scripts, automation, or analysis tooling
  • Contribute to secure design reviews and provide recommendations to strengthen architecture security
  • Partner with developers, infrastructure teams, and architects to embed security early in design and development
  • Assist in preparing security documentation, standards, patterns, and knowledge-sharing materials
  • Support security assessments and validation of security controls
  • Collaborate with senior engineers to learn and apply security frameworks, tools, and best practices
  • Communicate findings clearly for both technical and non-technical audiences

Requirements

  • Bachelor’s Degree required
  • 0–5 years of experience in cybersecurity, security engineering, or related technical role
  • Must be legally authorized to be employed in the United States; company does not anticipate sponsorship
  • Exposure to secure design principles and security architecture concepts
  • Familiarity with threat modeling and risk assessment methodologies (e.g., STRIDE, MITRE ATT&CK, NIST)
  • Experience or strong interest in scripting, automation, or tooling to support security operations and consulting
  • Strong analytical and problem-solving skills with attention to detail
  • Ability to clearly document technical work and explain findings to technical and non-technical stakeholders
  • Interest in modern security approaches such as Zero Trust and cloud-native security
  • Commitment to continuous learning and professional development in cybersecurity