Cyber Intel Analyst

At Lilly, the work is demanding because patients are waiting. We unite caring with discovery to help make life better for people around the world, knowing that every decision, every detail, and every day matters. Headquartered in Indianapolis, Indiana, our over 50,000 employees around the globe take on complex challenges to discover and deliver life-changing medicines, strengthen how health is understood and managed, and support the communities we serve. This is hard, urgent, selfless work—but it’s work worth doing. If you’re driven by purpose and ready to bring your best to work that truly matters for patients, we invite you to join us. 

Responsibilities·       External Threat Response (ETR): Responsible for the monitoring, detection, analysis, investigation, and response to cybersecurity related events and incidents.

• Key Objectives/Deliverables:·      
• Supporting: Assisting in various cybersecurity and other work as assigned.·   
•     Analyzing: Examining cyber threats and incidents.·      
• Developing: Creating capacity and capability to defend the Enterprise.·       Documenting: Thorough documentation of your analysis.·       Detecting: Identifying potential security issues.·       Prioritizing: Ranking threats based on severity.·       Responding: Taking action to mitigate threats.·       Innovating: Continually look for ways to improve the efficiency and output in each core function.
• Basic Qualifications·       0 to 6 years  of demonstrated experience in network operations or engineer and/or system administration, troubleshooting, or similar Information Technology related experience -OR- Bachelor’s Degree in Computer Science/Information Technology/Cybersecurity or related with some of Cybersecurity experience·       Demonstrated experience and excellence in documentation skills·       Experience working on Enterprise level cybersecurity detection and analysis·       Ability to communicate complex technical issues to non-technical personnel 
• Additional Skills/ PreferencesDemonstrated skills in:·       Use of endpoint security tools to collect information for digital forensics and incident response efforts.·       Use of strong investigatory principles to surface and pivot on information and insights that are material to a cyber investigation.·       Auditing firewalls, perimeters, routers, and intrusion detection systems.·       Relevant programming and query languages (e.g., PowerShell, bash, FQL, SPL, C++, Python, etc.).·       Reverse engineering (e.g., software debugging, de-compilation of code, binary literacy, Windows OS internals) to identify function and capability of malicious code.·       General knowledge of:·       Risk management processes (e.g., methods for assessing and mitigating risk).·       Current software and methodologies for active defense and system hardening.·       Network and raw network traffic data; foundational networking protocols such as IP, TCP, UDP, DNS, and HTTP.·       Malware – static and dynamic analysis techniques, detection methodologies and analysis techniques.·       Cloud technologies, cloud service models, resource pooling, authentication, and logging capabilities associated with major service providers.·       Laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.·       Certifications addressing new attack vectors (emphasis on cloud computing technology, mobile platforms, and tablet computers), new vulnerabilities, existing threats to operating environments, managing, maintaining, troubleshooting, installing, configuring basic network infrastructure. 
• Additional InformationRotational on-call availability for cybersecurity incidents raised outside of normal business working hours will be required. 
  

Lilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions. If you require accommodation to submit a resume for a position at Lilly, please complete the accommodation request form (https://careers.lilly.com/us/en/workplace-accommodation) for further assistance. Please note this is for individuals to request an accommodation as part of the application process and any other correspondence will not receive a response.

Lilly does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other legally protected status.