Digital Health Platform Security Engineer

At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our 35,000 employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We’re looking for people who are determined to make life better for people around the world.

Primary Position Responsibilities

• Perform Identity Management (IDM) and administer access rights for LDHC user and operations accounts in accordance with the defined policies of Lilly Digital Health and Information Security.
• Perform system security administration for LDHC-hosted applications in accordance with the Digital Health defined policies, industry best practices, and relevant COTS application guidelines.
• Perform installation and configuration of LDHC-centric security systems and applications.
• Perform normal and exceptional processing of user access and change requests, escalating such requests when appropriate.
• Develop and maintains documentation for LDHC security procedures (e.g. SOPs).
• Research, recommend, evaluate, and implement cybersecurity solutions that identify and/or protect against cybersecurity threats.
• Respond to and resolve/escalate reported LDHC-related security incidents.
• Assure appropriate monitoring of LDHC logs and network traffic for unusual or suspicious activity — Interpret and make recommendations for resolution when such activity is detected.
• Automate and administer LDHC log monitoring, including associated alert dispatch routing.
• Engage in interactive, pro-active log monitoring using at-scale technologies and SIEM methodologies.
• Investigate and resolve security violations by providing postmortem analysis to illuminate the issues and possible solutions.
• Participate in infrastructure projects to develop, plan and implement system security technologies.
• Support data encryption deployments, including LDHC-hosted key management.
• Implement and coordinate remediation required by audits.
• Participate in LDHC and application vulnerability testing, including penetration testing.
• Establish communication and expectations with peer organizations across the application service chain (e.g., TLAC, Information Security, 3rd party service orgs) so that issues can be expeditiously identified, triaged and resolved.

Basic Position Qualifications

• Bachelor’s or associate degree in Computer Science or related discipline.
• 2+ years relevant security operations and/or DevOps experience.
• 5+ years of experience in software development, cloud operations, or another related fields.
• Qualified candidates must be legally authorized for employment in the United States. Lilly does not anticipate providing sponsorship for employment visa status (e.g., H-1B or TN status) for this position.

Additional Skills/Preferences : 

• Previous experience with achieving and maintaining ISO 27001 certification.
• Familiarity implementing OTKA-based identity management solutions.
• Proficiency with Splunk administration and Search Processing Language (SPL).
• Experience designing and implementing SIEM solutions.
• Familiarity with developing and/or supporting Software as a Medical Device (SaMD) solutions.
• Strong working knowledge of IT workplace technologies
• Experience developing and/or maintaining software solutions hosted in AWS
• Demonstrated knowledge of Application Development and Support as well as DevOps concepts and associated implementations.
• Ability to align different groups with different priorities and opinions to a consistent and repeatable solution or process
• Excellent communication, interpersonal and team building skills (e.g., effective coaching and feedback delivery).
• Demonstrated IT service and application support leadership, using sound judgement and pragmatic approaches, in complex business and technical environments.
• Ability to deal with ambiguity and drive progress in lieu of established process and precedence.
• Comfortable challenging status quo with logical arguments supported by data.
• Ability to communicate technical challenges to non-technical personnel in a clear, tactful and concise manner.

Eli Lilly and Company, Lilly USA, LLC and our wholly owned subsidiaries (collectively “Lilly”) are committed to help individuals with disabilities to participate in the workforce and ensure equal opportunity to compete for jobs. If you require an accommodation to submit a resume for positions at Lilly, please email Lilly Human Resources ( [email protected] ) for further assistance. Please note This email address is intended for use only to request an accommodation as part of the application process. Any other correspondence will not receive a response.

Lilly is an EEO/Affirmative Action Employer and does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other legally protected status.

As a condition of employment with Eli Lilly and Company and its subsidiaries in the United States and Puerto Rico, you must be fully COVID-19 vaccinated and provide proof of vaccination satisfactory to the company. If you would like to request an accommodation for medical or religious reasons, you may do so at [email protected].