Technical Lead – Threat Mitigations

Eli Lilly and Company

. Intake vulnerability, exposure, and threat intelligence data from across the cyber organization .

Posted 10/9/2026full-timeRemote • United StatesSenior💰 $129,000 - $253,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat surface management and vulnerability management, with a strong focus on driving remediation campaigns and translating complex threat data into actionable insights. Proven ability to lead technical discussions, mentor analysts, and collaborate across cyber defense teams to enhance security posture.

Highest-signal resume keywords

Threat Surface ManagementVulnerability ManagementRemediation CampaignsThreat Intelligence AnalysisTechnical Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ScanningThreat IntelligenceRisk ManagementAutomation of TriageControl ValidationData AnalysisMitigation StrategiesTechnical RecommendationsBurndown ExecutionAdversary TTPs

Soft Skills

Stakeholder CommunicationProblem-SolvingAttention to DetailAnalytical Skills

Tools & Technologies

EDRSIEMGRC ToolCyber Defense ToolsVulnerability Prioritization Tooling

Certifications & Qualifications

CISSPOSCPGEVA

Industry Keywords

Cyber SecurityRegulated IndustryControl ImplementationAudit ExpectationsExposure Data

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Intake vulnerability, exposure, and threat intelligence data from across the cyber organization
Translate data into scoped, executable burndown campaigns with owners, targets, and timelines
Develop solutions to accelerate burndown execution, including automation of triage, deduplication, ownership identification, and notification
Drive burndowns to closure by tracking progress, unblocking remediation owners, and escalating stalled or high-severity work
Capture root causes, technical recommendations, and lessons learned for durable process improvement
Help platform, application, and infrastructure teams interpret mitigation requirements and complete security plans
Confirm threat mitigation requirements in the GRC tool, including control implementation, evidence, and record accuracy
Serve as a technical resource and subject matter expert for the threat surface management analyst pool
Lead technical deep dives into vulnerabilities, adversary TTPs, and threat intelligence
Identify skill gaps and upskill mitigation analysts
Develop and refine threat surface management capabilities and strategies
Collaborate with Cyber Defense, Identity and Access Management, Security Architecture & Engineering, and Platforms
Advise cyber leadership and stakeholders by translating threat and remediation data into actionable decisions

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Systems, or Cyber Security
5+ years of experience in threat surface management, vulnerability management, cyber defense, or a related security discipline
3+ years of experience scoping and driving remediation or mitigation campaigns to closure across teams you do not directly manage
3+ years of threat intelligence and exposure data, and applying it to prioritization, including CVSS, EPSS, KEV, adversary TTPs, and active exploitation reporting
Demonstrated technical leadership, including mentoring analysts and running deep technical dives
Hands-on experience with vulnerability scanning and prioritization tooling, EDR, and SIEM
Experience automating triage, deduplication, ownership identification, or notification within a remediation workflow
Experience working alongside a cyber defense, SOC, or threat intelligence function
Experience in a regulated industry with formal control validation and audit expectations
Excellent stakeholder communication and ability to translate technical threat and remediation data into decisions
Strong problem-solving and analytical skills, attention to detail, and risk management
Certifications such as CISSP, OSCP, GEVA, or equivalent preferred

Benefits

Comp & perks

Company bonus depending in part on company and individual performance
Company-sponsored 401(k)
Pension
Vacation benefits
Medical, dental, vision, and prescription drug benefits
Healthcare and/or dependent day care flexible spending accounts
Life insurance and death benefits
Certain time off and leave of absence benefits
Employee assistance program
Fitness benefits
Employee clubs and activities
Employee resource groups (ERGs)