Principle Security Engineer

At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We're looking for people who are determined to make life better for people around the world.

What You'll Be Doing:

As a Security Engineer, you will develop threat models and conduct security risk analysis for various systems and applications while implementing security technologies across the organization. You will analyze security requirements, perform risk assessments, and contribute to security architecture decisions. This role involves hands-on technical work in threat modeling and risk analysis, with opportunities to lead small specialized areas and coordinate security tasks with team members.

How You'll Succeed:

Technical proficiency: You will demonstrate expertise in specific security technologies and proactively learn emerging technologies like AI in security applications.

Risk analysis expertise: Success requires the ability to conduct comprehensive security risk assessments and develop actionable threat models.

Architecture contribution: You will contribute to security architecture decisions and provide technical input on complex security challenges.

Collaborative execution: Strong ability to work with cross-functional teams while leading small areas of risk analysis or security assessment.

Task coordination: You will effectively manage security tasks and coordinate with team members on technical implementations.

Process improvement: Drive improvements in threat modeling processes and security risk assessment methodologies.

Key Responsibilities:

Develop threat models and conduct security risk analysis for applications and systems

Implement and configure specific security technologies (e.g., SIEM, DLP, monitoring tools)

Perform comprehensive security risk assessments and vulnerability analysis

Lead small areas of risk analysis or specialized security assessment projects

Coordinate security tasks and provide technical guidance to team members

Contribute to security architecture decisions and design reviews

Analyze security requirements and translate them into technical implementations

Support security initiatives such as penetration testing and security automation

Document security findings and provide recommendations for risk mitigation

Participate in knowledge sharing and contribute to security best practices

Conducting threat modeling, performing security risk analysis, implementing security technologies, and coordinating specialized security assessment activities.

Your Basic Qualifications:

• Bachelor's Degree in Computer Science, Information Security, or related field OR High School Diploma/GED with 2+ years of experience in Information Security or related field
• At least 2-5 years of experience in security engineering, security risk analysis, threat modeling, or related discipline
• Qualified candidates must be legally authorized to be employed in the United States. The company does not anticipate providing sponsorship for employment visa status (e.g., H-1B or TN status) now or in the future.

What You Should Bring:

Strong knowledge of security technologies (SIEM, DLP, IDS/IPS, encryption standards)

Experience with threat modeling methodologies and risk assessment frameworks

Familiarity with security frameworks (e.g. MITRE ATT&CK, NIST, STRIDE)

Proven ability to conduct security risk analysis and vulnerability assessments

Experience implementing and configuring security tools and technologies

Strong analytical and problem-solving skills for complex security challenges

Good project coordination and task management capabilities

Ability to work collaboratively while leading small specialized areas

Initiative to learn emerging security technologies and methodologies

Excellent documentation and communication skills for technical findings

Technical collaboration: Working with development teams, conducting security assessments, coordinating security tasks, and contributing to specialized risk analysis projects.

Lilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions. If you require accommodation to submit a resume for a position at Lilly, please complete the accommodation request form ( for further assistance. Please note this is for individuals to request an accommodation as part of the application process and any other correspondence will not receive a response.

Lilly is proud to be an EEO Employer and does not discriminate on the basis of age, race, color, religion, gender identity, sex, gender expression, sexual orientation, genetic information, ancestry, national origin, protected veteran status, disability, or any other legally protected status.

Our employee resource groups (ERGs) offer strong support networks for their members and are open to all employees. Our current groups include: Africa, Middle East, Central Asia Network, Black Employees at Lilly, Chinese Culture Network, Japanese International Leadership Network (JILN), Lilly India Network, Organization of Latinx at Lilly (OLA), PRIDE (LGBTQ+ Allies), Veterans Leadership Network (VLN), Women's Initiative for Leading at Lilly (WILL), enAble (for people with disabilities). Learn more about all of our groups.

Actual compensation will depend on a candidate's education, experience, skills, and geographic location. The anticipated wage for this position is
$63,750 - $180,400

Full-time equivalent employees also will be eligible for a company bonus (depending, in part, on company and individual performance). In addition, Lilly offers a comprehensive benefit program to eligible employees, including eligibility to participate in a company-sponsored 401(k); pension; vacation benefits; eligibility for medical, dental, vision and prescription drug benefits; flexible benefits (e.g., healthcare and/or dependent day care flexible spending accounts); life insurance and death benefits; certain time off and leave of absence benefits; and well-being benefits (e.g., employee assistance program, fitness benefits, and employee clubs and activities).Lilly reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion and Lilly's compensation practices and guidelines will apply regarding the details of any promotion or transfer of Lilly employees.

#WeAreLilly