Threat Mitigation Lead - Network and Systems Attack Surface

Eli Lilly and Company; Indiana (PA); On-site; USD 120,000 - 160,000; Full time

Job summary

Lilly is seeking a Cybersecurity Threat Mitigations Advisor focused on threat surface management within its cybersecurity team in the United States. The role aims to reduce security risks by managing vulnerabilities, exposures, and threats across Lilly’s technology estate.

You will lead burndown campaigns, automate triage, validate controls, and act as a technical leader for the threat surface squad, collaborating across teams in a regulated biopharma environment.

Qualifications

• Bachelor’s in CS, IS, or Cyber Security.
• 5+ years in threat or vulnerability management.
• 3+ years driving remediation campaigns and handling threat intelligence data.

Responsibilities

• Lead burndown campaigns derived from threat intelligence.
• Automate triage and notification processes.
• Validate security controls.
• Serve as a technical expert and leader for the threat surface squad.

Skills

Threat intelligence

Vulnerability management

Remediation campaigns

Automation tools

SIEM

EDR

Technical leadership

Certifications

Education

Bachelor's degree in Computer Science, Information Systems, or Cyber Security

Tools

SIEM

EDR

Job description

Role

Cybersecurity Threat Mitigations Advisor focused on threat surface management within Lilly's cybersecurity team.

Objectives

reduce security risks by managing vulnerabilities, exposures, and threats across Lilly’s technology estate.

Responsibilities

• lead burndown campaigns derived from threat intelligence
• automate triage and notification processes
• validate security controls
• serve as a technical expert and leader for the threat surface squad

Requirements

• Bachelor’s in Computer Science, Information Systems, or Cyber Security
• 5+ years in threat or vulnerability management, cyber defense, or related field
• 3+ years driving remediation campaigns and handling threat intelligence data

Preferred

• technical leadership
• hands-on experience with vulnerability tooling
• SIEM
• EDR
• certifications (e.g., CISSP, OSCP)
• automation skills
• industry experience in regulated environments

High-Value

• threat surface management
• vulnerability remediation
• automation
• threat intelligence
• cross-team collaboration
• cyber control validation
• leadership in a regulated biopharma context

Work setup and travel details are not specified.