Enterprise AI Security Engineer

Eli Lilly and Company

. Implement, tune, and operate detection and policy content for enterprise AI guardrails across AI assistants, coding agents, and internally built agents .

Posted 10/7/2026full-timeRemote • United StatesJuniorMid-Level💰 $66,000 - $158,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in AI security engineering, including the implementation and tuning of detection policies, automation of security processes, and integration of security tooling with cloud platforms. Proficient in analyzing AI applications for vulnerabilities and communicating findings effectively to diverse stakeholders.

Highest-signal resume keywords

Python ProficiencyAWS or Azure KnowledgeDetection Engineering ExperienceInfrastructure-as-Code FamiliaritySecurity+ Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringSoftware EngineeringCloud EngineeringREST APIsSQLPrompt Injection UnderstandingData Leakage AnalysisDetection EngineeringCI/CD PipelinesDashboard Building

Soft Skills

Attention to DetailSound JudgmentClear Communication

Tools & Technologies

SIEMEDRTerraformCloudFormationDockerGitHub ActionsMCPAI Evaluation ToolsTicketing PlatformsTelemetry Pipelines

Certifications & Qualifications

Security+AWS Security CertificationAzure Security CertificationGIAC

Industry Keywords

AI GuardrailsOWASP Top 10 for LLM ApplicationsMITRE ATLASData ProtectionIdentity and Access ManagementChange ManagementRegulated EnvironmentInsider-Threat InvestigationsVulnerability AssessmentPolicy Content

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDockerPythonSQLTerraform

About the role

Key responsibilities & impact

Implement, tune, and operate detection and policy content for enterprise AI guardrails across AI assistants, coding agents, and internally built agents
Triage findings, classify true and false positives, and produce evidence to move controls from monitoring to blocking
Maintain runbooks, configuration as code, and test suites for guardrail rules and policies
Participate in tuning reviews, change management, and support rotations
Assess AI applications, agents, integrations, MCP servers, tool connectors, and third-party AI products
Execute tests for prompt injection, sensitive data exposure, excessive permissions, and unsafe agent actions
Contribute to AI threat models and security acceptance criteria using OWASP Top 10 for LLM Applications and MITRE ATLAS
Track remediation and verify fixes
Build telemetry pipelines, analytics, and dashboards for AI usage and agent activity
Develop AI-specific detections and alerts and forward them to SIEM and SOAR platforms
Support security operations and insider-threat investigations involving AI tools
Measure and report control effectiveness metrics
Integrate AI security tooling with AWS, Azure, endpoint, identity, data protection, and ticketing platforms
Automate deployment, testing, and rollback using CI/CD and infrastructure-as-code
Evaluate and pilot vendor and platform capabilities
Apply least privilege, secrets management, and logging to security tooling
Work with AI application and agent teams to apply security requirements and approved patterns
Contribute to documentation, standards, and reusable patterns
Stay current on LLM and agent threats, vendor guardrails, and industry frameworks
At Principal Engineer level, lead workstreams, mentor engineers, and represent the team in cross-functional sessions

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or an IT-related field
2+ years of experience in security engineering, software engineering, cloud engineering, or security operations
Authorized to work in the United States on a full-time basis
Lilly will not provide support for or sponsor work authorization or visas for this role
Proficiency in Python and Bash or PowerShell scripting
Experience with REST APIs and structured data such as JSON and SQL
Working knowledge of AWS or Azure
Working knowledge of identity and access management, application security, data protection, or security monitoring
Hands-on familiarity with LLM-based applications, coding assistants, or agents
Understanding of prompt injection, data leakage, and excessive permissions
Experience with detection engineering, DLP, or rule tuning in SIEM, EDR, or proxy/gateway platforms
Experience with LLM APIs, agent frameworks, MCP, and AI evaluation or red-team tooling
Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS
Experience with infrastructure-as-code, containers, and CI/CD pipelines, such as Terraform, CloudFormation, Docker, or GitHub Actions
Experience querying and analyzing data at scale using SQL, Athena, or similar tools
Experience building dashboards
Relevant certifications such as Security+, AWS or Azure security, or GIAC, or participation in CTF or AI red-team exercises
Ability to analyze data, write clear findings, and communicate technical issues to technical and non-technical stakeholders
Attention to detail, sound judgment, and comfort working in a regulated environment with change control and audit requirements

Benefits

Comp & perks

Company bonus depending in part on company and individual performance
Company-sponsored 401(k)
Pension
Vacation benefits
Medical, dental, vision, and prescription drug benefits
Flexible benefits, including healthcare and/or dependent day care flexible spending accounts
Life insurance and death benefits
Time off and leave of absence benefits
Well-being benefits, including employee assistance program, fitness benefits, and employee clubs and activities