Senior Security Engineer - Remote

Overview

As a Senior Security Engineer at Lilly, you will focus on securing applications throughout the development lifecycle by developing threat models, conducting security risk analysis, and implementing application security tools.

In Short

• Conduct security risk assessments and static application security testing (SAST).
• Collaborate with DevOps teams to integrate security testing into CI/CD pipelines.
• Provide security consultation and guidance to development teams during the SDLC.
• Educate developers on secure coding practices and vulnerability remediation techniques.
• Analyze application security scan results and prioritize findings based on risk.
• Create secure development materials and reference guides.
• Assist with tracking and reporting application security metrics.
• Perform dynamic application security testing (DAST) as needed.

Requirements

• Strong technical expertise in application security coding practices and testing methodologies.
• Experience with SAST, DAST, and ASPM tools (e.g., Checkmarx, Burp Suite).
• Proven track record of conducting security risk assessments.
• Knowledge of common application vulnerabilities (OWASP Top 10, CWE).
• Understanding of multiple programming languages and frameworks.
• Experience with DevSecOps practices and CI/CD pipeline security integration.
• Strong communication skills.
• Ability to work collaboratively with development teams.
• Commitment to staying current with emerging application security threats.

Benefits

• Comprehensive benefit program including 401(k) and pension.
• Medical, dental, vision, and prescription drug benefits.
• Flexible benefits (e.g., healthcare and dependent care flexible spending accounts).
• Life insurance and death benefits.
• Vacation benefits and time off.
• Employee assistance program and fitness benefits.
• Opportunities for professional development and advancement.
• Supportive employee resource groups.