Associate - Information Security Adversary Simulation Consultant

At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our 35,000 employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We're looking for people who are determined to make life better for people around the world.

• Develop and deliver the adversary simulation portfolio and roadmap.
• Work closely with Incident Response and Cyber Threat Intelligence to prioritize and aid in development of new Use Case detection logic.
• Maintains accurate program estimates, timelines, project plans, and status reports.
• Performs as a subject matter expert on applying attacker tools, tactics, and procedures in a safe and controlled manner.
• Evaluate industry best practices and apply them as appropriate, keeping management apprised of trends and emerging technologies.
• Perform vulnerability analysis on potential target systems and leverage the analysis to prioritize exploitable systems.
• Write technical reports that address key findings and recommendations. Ability to write at various levels of technical detail is required, ranging from Executive level to IT administrator.
• Deliver convincing, impactful presentations. Along with presentation of findings and results of missions, technical presentations of emerging attack technologies and other offensive focused information security topics will be required.
• Software development in support of automation of Adversary Simulation missions and capabilities.
• Build and maintain Adversary Simulation infrastructure to support missions and capabilities.
• Encourage innovation, implementation of cutting-edge technologies, inclusion, outside-of-the-box thinking, teamwork, self-organization, and diversity.
• Establishes credibility with partners while managing expectations. Ensures frequent, continuous and effective communications with team members and stakeholders to set expectations and negotiate priorities appropriately.

• Bachelor's degree
• 5 years of Information Security experience
• 5 years of Information Technology experience
• Previous experience conducting penetration tests or adversary simulations.
• Previous experience with DevOps automation techniques: Ansible, Terraform, Vagrant, etc.
• Qualified candidates must be legally authorized to be employed in the United States. Lilly does not anticipate providing sponsorship for employment visa status (e.g., H-1B or TN status) for this employment position

• One or more Information Security certifications such as: CISSP, GSEC, GCIH, Security+, OSCP, CEH, etc.
• Experience in Python, Powershell, or other scripting languages
• Basic working knowledge of programming languages and concepts
• System administration experience in at least one of the following technology areas is required: Windows, nix, Cisco IOS
• Excellent oral and written communication skills
• Excellent interpersonal and organizational skills
• Demonstrated skill and passion for operational excellence and solution delivery