Senior Cloud Security Engineer - Hybrid Role + Growth

Eli Lilly and Company; Cork; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Flexible hybrid working

Healthcare

Pension and life assurance

Canteen subsidy

Onsite gym

Travel subsidies

On-site parking

Job summary

Eli Lilly Cork is seeking a Cloud Security Engineer to join the Security Architecture and Engineering team. You will manage CNAPP/CSPM tools, review cloud accounts, and drive secure cloud design across AWS and Azure in a hybrid setup.

Responsibilities include IaC review, security controls development, automations for detection/response, and collaboration with Cyber Defense Operations and partners to maintain strong security posture.

Qualifications

• Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or related field or 4+ years of experience in Cyber Security/IT.
• 5+ years of demonstrated experience in cloud architecture and engineering, with a focus on AWS, Azure, or GCP (slight preference for Azure).
• Strong understanding of cloud security concepts, services, and logs, including IAM, Networking, and Security in a public cloud environment.
• Experience with cloud security services such as Security Hub, GuardDuty, CloudTrail, Config, VPC Flow Logs, Amazon Inspector, Amazon Detective, Cloud Custodian, Azure Policy, Azure Activity log, Defender for Cloud, Azure Sentinel, or Security Copilot.
• Basic proficiency in a programming language (e.g., Python) and experience with cloud automation and integration using Lambda, Step Functions, Glue, Azure Functions, Terraform, or CloudFormation.

Responsibilities

• Manage cloud security tools (CNAPP/CSPM) and implement cloud security controls in a multi-cloud environment (AWS and Azure).
• Conduct security reviews of cloud accounts and projects, generate proactive guidance, and participate in cloud design discussions.
• Review IaC/policy as code template proposals and provide recommendations for secure cloud deployments.
• Develop integrations and automations for cloud security detection and response actions to support the Cyber Defense Operations.
• Partner with cloud foundation teams, Cyber Defense Operations, Tech@Lilly, business areas, and suppliers to ensure secure cloud adoption and operations.
• Perform threat analysis and modeling to enable business and technical partners to deliver secure solutions integrated with the SecOps lifecycle.
• Apply threat modeling and analysis frameworks such as MITRE ATT&CK and STRIDE (or STRIDE-LM) in security practices.
• Maintain and expand technical knowledge across cloud security concepts and technologies, driving knowledge growth across security domains.
• Identify technical solutions and drive implementation to support strategic direction, focusing on value, impact, risk mitigation, security controls, privacy controls, detection, response, and quality.
• Prioritize mitigations in relation to technology upgrades, enhancements, and process improvements within the respective domains of accountability.

Skills

Cloud security concepts

IAM & Networking

Public cloud security

Threat modeling (MITRE/STRIDE)

Python basics

Cloud automation

Education

Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or related field

Tools

AWS

Azure

GCP

Security Hub

GuardDuty

CloudTrail

Config

VPC Flow Logs

Amazon Inspector

Amazon Detective

Cloud Custodian

Azure Policy

Azure Activity Log

Defender for Cloud

Azure Sentinel

Security Copilot

Terraform

CloudFormation

Lambda

Job description

Eli Lilly Cork is seeking a Cloud Security Engineer to join the Security Architecture and Engineering team. You will manage CNAPP/CSPM tools, review cloud accounts, and drive secure cloud design across AWS and Azure in a hybrid setup.

Responsibilities include IaC review, security controls development, automations for detection/response, and collaboration with Cyber Defense Operations and partners to maintain strong security posture.