> Markdown version of [/jobs/ext/2651083-cyber-intelligence-analyst](https://www.wearedevelopers.com/jobs/ext/2651083-cyber-intelligence-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Intelligence Analyst - **Company:** The Lilly Company - **Location:** Indianapolis, IN, United States (Remote available) - **Experience:** Experienced - **Salary:** $64,500.0 - $158,400.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, User Authentication, Bash Shell, C++ (Programming Language), Cloud Computing, Cyber Security, Computer Programming, Computer Networks, Computer Telephony Integration, System Configuration, Query Languages, Software Debugging, DevOps, Digital Forensics, Domain Name System (DNS), Intrusion Detection Systems, Python (Programming Language), NetFlow, Network Protocols, Windows PowerShell, Program Analysis, Cloud Services, Kusto Query Language, Reverse Engineering, Transmission Control Protocol (TCP), Data Logging, Network Routers, Computer Network Operations, Malware, Cyber Threat Analysis, Information Technology, Cybercrime, Cyber Warfare, Vulnerability Analysis - **Published:** August 19, 2026 - **Apply:** https://www.indianapolisgigs.com/job.asp?id=3358938821&tx=KP3535FFF&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role * HS Diploma or GED * At least 2+ years of demonstrated experience in network operations or engineer and/or system administration, troubleshooting, or similar Information Technology related experience * Demonstrated experience and excellence in documentation skills * Experience working on Enterprise level cybersecurity detection and analysis * Qualified candidates must be legally authorized to be employed in the United States. Lilly does not anticipate providing sponsorship for employment visa status (e.g., H-1B or TN status) What You Should Bring: * Bachelor's Degree in Computer Science/Information Technology/Cybersecurity or related is preferred * Experience with monitoring system operations and reacting to events in response to triggers and/or observation of trends or unusual activity. * Ability to communicate complex technical issues to non-technical personnel * Demonstrated skills in: * Use of endpoint security tools to collect information for digital forensics and incident response efforts. * Use of strong investigatory principles to surface and pivot on information and insights that are material to a cyber investigation. * Auditing firewalls, perimeters, routers, and intrusion detection systems. * Relevant programming and query languages (e.g., PowerShell, bash, FQL, KQL, SPL, C++, Python, etc.). * Reverse engineering (e.g., software debugging, de-compilation of code, binary literacy, Windows OS internals) to identify function and capability of malicious code. * General knowledge of: * Risk management processes (e.g., methods for assessing and mitigating risk). ## Description The Cyber Intelligence Analyst will operate in a functional group focusing on any of the following: Attack Surface Management, Cyber Threat Intelligence, Detection and Automation Operations, Cyber Defense Readiness, External Threat Response, and Insider Threat Response. Analysts typically begin with an assignment in the External Threat Response (ETR) function; however, you may be assigned to any of the core GCDO functions (Attack Surface Management, Cyber Threat Intelligence, Cyber Defense Readiness, Detection and Analysis Operations, Internal Threat Response) based on skills, development needs, and specific needs of the team. The functions of the GCDO are as follows * External Threat Response (ETR): Responsible for the monitoring, detection, analysis, investigation, and response to cybersecurity related events and incidents. * Attack Surface Management (ASM): Responsible for reducing the overall attack surface of the Enterprise, including the identification, analysis, and remediation of vulnerabilities. * Cyber Threat Intelligence (CTI): Leading efforts across the organization to consume, contribute, and produce threat intelligence, both internal and external to Lilly. Maintain, develop, and evangelize to partner functions an understanding of threats, attack campaigns and intrusion sets targeting Lilly. * Cyber Defense Readiness (CDR): Responsible for the integration of key initiatives between the GCDO and the rest of Cybersecurity and other business partners. * Detection and Analysis Operations (DAO): Responsible for general SecOps and DevOps of GCDO owned capability to empower the organization. Establishing the platform and services to enable the effective detection and monitoring of security events, as well as providing a means to analyze and improve detections. * Internal Threat Response (ITR): Responsible for the monitoring, analysis, and investigation of cybersecurity related events and incidents, with a focus on the internal workforce. How You Will Succeed: Through the effective performance of the following responsibilities * Supporting: Assisting in various cybersecurity and other work as assigned. * Analyzing: Examining cyber threats and incidents. * Developing: Creating capability to enable each core function. * Documenting: Thorough documentation of your analysis. * Detecting: Identifying potential security issues. * Prioritizing: Ranking threats based on severity. * Responding: Taking action to mitigate threats. * Recommending Strategic Changes: Drive security improvements that will increase our ability to defend the Enterprise. * Provide rotational on-call availability for cybersecurity incidents raised outside of normal business working hours., * Netflow and raw network traffic data; foundational networking protocols such as IP, TCP, UDP, DNS, and HTTP. * Malware - static and dynamic analysis techniques, detection methodologies and analysis techniques. * Cloud technologies, cloud service models, resource pooling, authentication, and logging capabilities associated with major service providers. * Laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. * Certifications addressing new attack vectors (emphasis on cloud computing technology, mobile platforms, and tablet computers), new vulnerabilities, existing threats to operating environments, managing, maintaining, troubleshooting, installing, configuring basic network infrastructure. Location & Work Flexibility This role is based at our Corporate Center in Indianapolis, IN. We offer a flexible hybrid work model, with three days onsite and two days working remotely each week , supporting both collaboration and work-life balance. Some travel may be required. Lilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions. If you require accommodation to submit a resume for a position at Lilly, please complete the accommodation request form ( https://careers.lilly.com/us/en/workplace-accommodation ) for further assistance. Please note this is for individuals to request an accommodation as part of the application process and any other correspondence will not receive a response. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)