About the RoleCloud Security Engineer on the Security Architecture and Engineering team at Lilly.Location: Eli Lilly Cork, Little Island campus.Key ResponsibilitiesManage cloud security tools (CNAPP/CSPM) and implement cloud security controls in a multi‑cloud environment (AWS and Azure).Conduct security reviews of cloud accounts and projects, generate proactive guidance, and participate in cloud design discussions.Review IaC/policy as code template proposals and provide secure deployment recommendations.Develop integrations and automations for cloud security detection and response actions to support Cyber Defense Operations.Partner with cloud foundation teams, Cyber Defense Operations, Tech@Lilly, business areas, and suppliers to ensure secure cloud adoption and operations.Perform threat analysis and modeling to enable secure solutions integrated with the SecOps lifecycle.Apply threat modeling and analysis frameworks such as MITRE ATT&CK and STRIDE (or STRIDE-LM).Maintain and expand technical knowledge across cloud security concepts and technologies, driving knowledge growth across security domains.Identify technical solutions and drive implementation to support strategic direction, focusing on value, impact, risk mitigation, security controls, privacy controls, detection, response, and quality.Prioritize mitigations in relation to technology upgrades, enhancements, and process improvements within respective domains of accountability.Success FactorsDeep technical knowledge of cloud ecosystems (AWS or Azure) for tailored security solutions.Strong problem‑solving skills for quick identification and resolution of security issues.Excellent collaboration and communication skills with technical and non‑technical audiences.Agility to adapt to the evolving threat landscape and respond at the pace of adversaries.Staying current with cloud security trends and integrating insights into practices.Ability to balance stringent security requirements with operational needs and support engineering teams.Basic QualificationsBachelor’s degree in Cyber Security, Computer Science, Information Technology, or related field.OR 4+ years of experience in Cyber Security, Information Technology, or related field.5+ years of demonstrated experience in cloud architecture and engineering, focusing on AWS, Azure, or GCP (slight preference for Azure).Additional SkillsStrong understanding of cloud security concepts, services, and logs, including IAM, Networking, and security in a public cloud.Experience with cloud security services such as Security Hub, GuardDuty, CloudTrail, Config, VPC Flow Logs, Amazon Inspector, Amazon Detective, Cloud Custodian, Azure Policy, Azure Activity log, Defender for Cloud, Azure Sentinel, or Security Copilot.Basic proficiency in a programming language (e.g., Python) and experience with cloud automation and integration tools such as Lambda, Step Functions, Glue, Azure Functions, Terraform, or CloudFormation.Equal OpportunityLilly does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability, or any other legally protected status. Lilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions.
#J-18808-Ljbffr