Senior Security Engineer

Job Summary

As a senior technical leader in the Security Architecture & Engineering organization, the full-time Senior Security Engineer will lead strategy and architecture for Lilly's Application Security program, focusing on security solutions, tool evaluation, and enterprise platform transformations, while working in a hybrid model with three days onsite and two days remote each week.

Key Responsibilities:

• Define and maintain the architectural direction for the Secure SDLC program, ensuring compliance and security requirements are met
• Lead evaluations of security tooling and produce recommendations for leadership decision-making
• Serve as the AppSec architecture lead for platform transformations, ensuring security requirements are integrated into migration plans

Required Qualifications:

• Bachelor's Degree in Computer Science, Information Security, Software Engineering, or a related field
• At least 5 years of experience in application security or security architecture
• Demonstrated experience leading large-scale security or platform migrations in an enterprise environment
• Hands-on experience with GitHub enterprise environments and CI/CD security controls
• Experience evaluating and selecting enterprise security tooling, including SAST, DAST, or SCA platforms