> Markdown version of [/jobs/ext/4360286-threat-mitigation-lead-network-and-systems-attack-surface](https://www.wearedevelopers.com/jobs/ext/4360286-threat-mitigation-lead-network-and-systems-attack-surface). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Threat Mitigation Lead - Network and Systems Attack Surface - **Company:** Eli Lilly and Company - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $47,840.0 - $62,400.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Information Systems, Data Deduplication, Identity and Access Management, Information Systems Security Architecture Professional, Security Information and Event Management, Software Vulnerability Management, Information Technology, Cyber Warfare, Vulnerability Analysis - **Published:** October 2, 2026 - **Apply:** https://www.builtincolorado.com/auth/login?destination=/job/threat-mitigation-lead-network-and-systems-attack-surface/11468076 ## About the Role * Bachelor's degree in Computer Science, Information Systems, or Cyber Security * 5+ years of experience in threat surface management, vulnerability management, cyber defense, or a related security discipline. * 3 years+ experience scoping and driving remediation or mitigation campaigns to closure across teams you do not directly manage. * 3 years+ of threat intelligence and exposure data, and how to apply it to prioritization (e.g., CVSS, EPSS, KEV, adversary TTPs, active exploitation reporting). Preferences: * Demonstrated technical leadership - mentoring analysts, running deep technical dives, and raising the capability of a team without formal authority. * Hands-on experience with the security control platforms that generate and enforce mitigation work - vulnerability scanning and prioritization tooling, EDR, and SIEM. * Certifications such as Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), GIAC Enterprise Vulnerability Assessor (GEVA), or equivalent. * Experience automating triage, deduplication, ownership identification, or notification within a remediation workflow. * Experience working alongside a cyber defense, SOC, or threat intelligence function. * Experience in a regulated industry with formal control validation and audit expectations. * Excellent stakeholder communication, with the ability to translate technical threat and remediation data into decisions for leadership and business owners. * Strong problem-solving and analytical skills, with a keen eye for detail and risk management., Lilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions. If you require accommodation to submit a resume for a position at Lilly, please complete the accommodation request form (https://careers.lilly.com/us/en/workplace-accommodation) for further assistance. Please note this is for individuals to request an accommodation as part of the application process and any other correspondence will not receive a response. ## Description The Cyber Threat Mitigations Team is looking for an experienced service-area lead with strong background in threat surface management and the technical control solutions that support it (ex. vulnerability scanning and prioritization platforms, EDR, SIEM). This role is designed for someone who excels at working with cross-functional teams to drive down security risk across Lilly's technology estate, and who will build durable connections with adjacent cybersecurity teams to ensure emerging threats translate into prioritized, actionable mitigation work. As a Threat Mitigations Advisor, you will partner with internal cyber teams, platform and application owners, and business stakeholders to reduce the impact of identified vulnerabilities and threats. You will drive burndowns of targeted risks across the organization and support application teams in executing their cyber mitigation plans. You will also serve as a technical anchor for the threat surface management squad, raising the capability of the analysts around you., Threat Mitigation & Burndown Execution * Assist in the intake of vulnerability, exposure, and threat intelligence data from across the cyber organization and translate it into scoped, executable burndown campaigns with clear owners, targets, and timelines. * Develop solutions that accelerate burndown execution, including automation of triage, deduplication, ownership identification, and notification. * Drive burndowns to closure - tracking progress against targets, unblocking remediation owners, and escalating stalled or high-severity work. * Capture root cause, technical recommendations, and lessons learned, and package them for the teams that can act on them to drive durable process improvement. Threat Mitigation Plan Validation & Support * Assist platform, application, and infrastructure teams in interpreting mitigation requirements and completing their security plans, removing friction rather than simply tracking overdue items. * Serve as a technical resource for the 'how' * Confirm implementation of threat mitigation requirements in our GRC tool - validating that required controls are in place, evidence is attached, and records are accurate before closure. Threat Surface Management Squad Leadership * Serve as the subject matter expert for the wider analyst pool, leading deep technical dives into vulnerabilities, adversary TTPs, and threat intelligence to build the team's capability. * Upskill the Mitigation Analyst Pool by identifying skill gaps and closing them to sustain service area delivery. * Develop and refine capabilities and strategies that expand what the threat surface management squad can deliver to the wider organization. Cross-functional Collaboration * Build and sustain working relationships with adjacent cybersecurity teams including Cyber Defense, Identity and Access Management, Security Architecture & Engineering, and Platforms. * Serve as a technical advisor to cyber leadership and their stakeholders across the wider organization, translating threat and remediation data into decisions leadership can act on., Leads strategy, roadmap, prioritization, development, and financial performance for business technology products supporting Vendor Finance. Coordinates technology, business, risk, compliance, and vendor stakeholders; manages product initiatives, timelines, budgets, customer experience, and regulatory requirements. Evaluates product opportunities, drives innovation using emerging technologies including AI, and leads product development teams, including staffing, performance management, and talent development. Top Skills: Agile MethodologyArtificial IntelligenceSoftware Development Life Cycle What you need to know about the Colorado Tech Scene With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation. Key Facts About Colorado Tech * Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey) * Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3 * Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech * Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook) * Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures * Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute