Cyber Security Analyst

At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first.

We’re looking for people who are determined to make life better for people around the world.

Join our Security Operations team in Indianapolis, IN where you will get to work on cutting edge cybersecurity technologies while driving exceptional customer experience and improving our enterprise security platform services.

• Respond to support cases from customers experiencing issues with security tools
• Provide timely and effective technical troubleshooting and resolution
• Document case studies, playbooks, and solutions for future reference by team
• Develop and maintain knowledge base articles and operational procedures
• Communicate updates and status clearly and professionally to customers
• Collaborate with cross-functional teams (engineering, product, IT architects) to expand and resolve complex issues
• Identify trends in customer issues and recommend product or process improvements
• Participate in training sessions, conferences, and workshops to expand skills and share learnings with the team

• Manage inbound security tool incidents across SIEM, IDS/IPS, EDR, Zscaler (ZIA/ZPA), Cloudflare WAF, Identity & Access Management, and/or other cloud security platforms
• Adaptability and willingness to learn new technologies and processes
• Develop proactive means of identifying security platform issues before business impact is realized
• Assist with developing automation scripts and workflows to increase operational efficiency
• Identify opportunities and drive initiatives to automate routine tasks and processes

• Create and update detailed playbooks, runbooks, and troubleshooting guides
• Contribute to an evolving knowledge base to empower peers and customers
• Document health metrics to measure security tool effectiveness and coverage

• Foster strong teamwork by mentoring and coaching junior engineers
• Work closely with product managers and senior engineers to translate feedback into platform enhancements
• Liaise with enterprise IT, architects, Technical leads and stakeholders to align solutions with business needs
• Advocate innovative security solutions that balance user experience and protection

• Stay current on security threats, regulatory changes, and emerging technologies
• Drive adoption of creative, scalable solutions for complex global security platform challenges
• Analyze recurring issues, support tickets and operational data to identify improvement areas
• Propose and implement process optimizations and preventive measures
• Assist with testing and enablement of new tools, technologies and operational capabilities
• Evaluate new tools and/or feature sets for existing tools (e.g., Splunk, Crowd Strike, Zscaler (ZIA/ZPA), Cloudflare WAF) and recommend integrations

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or similar degree and at least 1 year experience in technical support, security operations, or platform engineering
• OR Associate degree in Cybersecurity, Computer Science, IT or similar degree and at least 5 years experience in technical support, security operations, or platform engineering
• Hands‑on with SIEM, IDS/IPS, EDR, web application firewalls, identity/access management, and cloud security
• Basic networking knowledge (TCP/IP, DNS, DHCP)
• Qualified candidates must be legally authorized to be employed in the United States. Lilly does not anticipate providing sponsorship for employment visa status (e.g., H-1B or TN status)

• Strong problem‑solving skills and a methodical troubleshooting approach
• Excellent written and verbal communication; customer‑focused mindset
• Scripting proficiency (Python, Power Shell) for automation…