Cloud security engineer

Lilly allie le soin à la découverte pour améliorer la vie des gens partout dans le monde. Lilly est un chef de file mondial des soins de santé, avec son siège à Indianapolis. Nos collaborateurs travaillent à découvrir et à fournir à ceux qui en ont besoin des médicaments qui transforment la vie, à améliorer la compréhension et la gestion des maladies et à redonner à nos communautés grâce à la philanthropie et au bénévolat. Nous donnons le meilleur de nous-mêmes à notre travail, et nous accordons la priorité aux personnes. Nous recherchons des collaborateurs déterminés à améliorer la vie des gens dans le monde entier.

Eli Lilly Cork is made up of a talented diverse team of over 2000 employees across 60 nationalities who deliver innovative solutions that add value across a variety of Business Service functions including Finance, Information Technology, Medical, Clinical Trials and more. Eli Lilly Cork offers a premium workspace across our campus in Little Island, complete with flexible hybrid working options, healthcare, pension and life assurance benefits, subsidised canteen, onsite gym, travel subsidies and on-site parking. Inhouse People Development services, Educational Assistance, and our ‘Live Your BEST Life’ wellbeing initiatives are just some of the holistic benefits that enhance the career experience for our colleagues.

Eli Lilly Cork is committed to diversity, equity and inclusion (DEI). We cater for all dimensions ensuring inclusion of all ethnicities, nationalities, cultural backgrounds, generations, sexuality, visible and invisible disabilities and gender, with four pillars: EnAble, Age & Culture, LGBTQ+ and GIN-Gender Inclusion Network. EnAble, our pillar for people with disabilities and those that care for them, partners with the Access Lilly initiative to make our physical and digital environment accessible and inclusive for all. Together they are committed to promoting awareness to create a disability confident culture both at Eli Lilly Cork and beyond.

Come join our team - Be Creative, Be an Innovator, and most of all, Be Yourself!

What You'll Be Doing:

As a Cloud Security Engineer at Lilly on the Security Architecture and Engineering team, you will play a pivotal role in a dynamic environment. Your responsibilities include managing cloud security tools (CNAPP/CSPM), conducting security reviews of cloud accounts and projects, generating proactive guidance, reviewing and creating IaC/policy as code templates, and participating in cloud design discussions. You will also contribute to the development and implementation of cloud security controls, create integrations and automations for cloud security detection and response actions, and collaborate with various stakeholders across the organization.

How You'll Succeed:

* Technical expertise: As a Cloud Security Engineer, you will leverage your deep technical knowledge of cloud ecosystems (AWS or Azure) to implement tailored security solutions and effectively mitigate threats and risks.
* Problem-solving skills: Adept problem-solving abilities are crucial in quickly identifying and addressing security issues, ensuring the development and delivery of robust cloud security solutions in a timely manner.
* Collaboration and communication skills: You will actively collaborate with both local and remote team members, playing a pivotal role in defining, designing, and executing cloud security strategies. Excellent communication skills are essential for this role, as you will need to engage with both technical and non-technical audiences.
* Agility: The ability to quickly adapt to the changing threat landscape and move at the pace of the adversary is critical to success in this role.
* Knowledge of cloud security trends: This role requires staying abreast of the latest developments in cloud security and integrating these insights into our practices.
* Balancing security and operational needs: You will balance stringent security guidelines with operational requirements, maintaining the desired corporate security posture while demonstrating empathy and understanding towards the engineering teams' challenges and needs.

Key Responsibilities:

* Manage cloud security tools (CNAPP/CSPM) and implement cloud security controls in a multi-cloud environment (AWS and Azure).
* Conduct security reviews of cloud accounts and projects, generate proactive guidance, and participate in cloud design discussions.
* Review IaC/policy as code template proposals and provide recommendations for secure cloud deployments.
* Develop integrations and automations for cloud security detection and response actions to support the Cyber Defense Operations.
* Partner with cloud foundation teams, Cyber Defense Operations, Tech@Lilly, business areas, and suppliers to ensure secure cloud adoption and operations.
* Perform threat analysis and modeling to enable business and technical partners to deliver secure solutions integrated with the SecOps lifecycle.
* Apply threat modeling and analysis frameworks such as MITRE ATT&CK and STRIDE (or STRIDE-LM) in security practices.
* Maintain and expand technical knowledge across cloud security concepts and technologies, driving knowledge growth across security domains.
* Identify technical solutions and drive implementation to support strategic direction, focusing on value, impact, risk mitigation, security controls, privacy controls, detection, response, and quality.
* Prioritize mitigations in relation to technology upgrades, enhancements, and process improvements within the respective domains of accountability.

Your Basic Qualifications:

* Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field Or
* High School Diploma/GED with 4+ years of experience in Cyber Security, Information Technology, or related field.
* 5+ years of demonstrated experience in cloud architecture and engineering, with a focus on AWS, Azure, or GCP (slight preference for Azure).

Additional Skills:

* Strong understanding of cloud security concepts, services, and logs, including Identity and Access Management, Networking, and Security in a public cloud environment.
* Experience with cloud security services such as Security Hub, GuardDuty, CloudTrail, Config, VPC Flow Logs, Amazon Inspector, Amazon Detective, Cloud Custodian, Azure Policy, Azure Activity log, Defender for Cloud, Azure Sentinel, or Security Copilot.
* At least basic proficiency in a programming language (e.g., Python) and some experience with cloud automation and integration using tools such as Lambda, Step Functions, Glue, Azure Functions, Terraform, or CloudFormation.

Lilly s’efforce d’aider les personnes handicapées à s’engager activement dans le monde du travail, en leur garantissant l’égalité des chances lorsqu’elles postulent à un emploi. Si vous avez besoin d’un aménagement pour soumettre un CV pour un poste chez Lilly, veuillez remplir le formulaire de demande d’aménagement (https://careers.lilly.com/us/en/workplace-accommodation ) pour obtenir de l’aide. Veuillez noter qu’il s’agit d’une demande d’aménagement dans le cadre de la procédure de candidature et que toute autre correspondance ne recevra pas de réponse.

Lilly ne pratique aucune discrimination basée sur l’âge, la race, la couleur, la religion, le sexe, l’orientation sexuelle, l’identité sexuelle, l’expression sexuelle, l’origine nationale, le statut d’ancien combattant protégé, le handicap ou tout autre statut protégé par la loi.

#WeAreLillyUKandIreland