-
Job Description
Cloud Security Engineer role at Lilly requires expertise in cloud ecosystems, problem-solving, collaboration, and communication to implement tailored security solutions and mitigate threats.
At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana.
As a Cloud Security Engineer, you will play a pivotal role in a dynamic environment. Your responsibilities include:
- Managing cloud security tools (CNAPP/CSPM) and implementing cloud security controls in a multi-cloud environment (AWS and Azure).
- Conducting security reviews of cloud accounts and projects, generating proactive guidance, and participating in cloud design discussions.
- Reviewing Ia C/policy as code template proposals and providing recommendations for secure cloud deployments.
- Developing integrations and automations for cloud security detection and response actions to support the Cyber Defense Operations.
- Partnering with cloud foundation teams, Cyber Defense Operations, Tech@Lilly, business areas, and suppliers to ensure secure cloud adoption and operations.
- Performing threat analysis and modeling to enable business and technical partners to deliver secure solutions integrated with the Sec Ops lifecycle.
- Applying threat modeling and analysis frameworks such as MITRE ATT&CK and STRIDE (or STRIDE-LM) in security practices.
- Maintaining and expanding technical knowledge across cloud security concepts and technologies, driving knowledge growth across security domains.
- Identifying technical solutions and driving implementation to support strategic direction, focusing on value, impact, risk mitigation, security controls, privacy controls, detection, response, and quality.
To succeed in this role, you will need:
- Technical expertise in cloud ecosystems (AWS or Azure).
- Problem-solving skills to quickly identify and address security issues.
- Collaboration and communication skills to work with local and remote team members.
- Agility to quickly adapt to the changing threat landscape.
- Knowledge of cloud security trends and the ability to integrate insights into our practices.
- Balancing security and operational needs to maintain the desired corporate security posture.
Requirements:
- Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field.
- 2-6 years of demonstrated experience in cloud architecture and engineering, with a focus on AWS or Azure.
- Strong understanding of cloud security concepts, services, and logs, including Identity and Access Management, Networking, and Security in a public cloud environment.
- Experience with cloud security services such as Security Hub, Guard Duty, Cloud Trail, Config, VPC Flow Logs, Amazon Inspector, Amazon Detective, Cloud Custodian, Azure Policy, Azure Activity log, Defender for Cloud, Azure Sentinel, or Security Copilot.
- At least basic proficiency in a programming language (e.g., Python) and some experience with cloud automation and integration using tools such as Lambda, Step Functions, Glue, Azure Functions, Terraform, or Cloud Formation.