{"id":2228410,"url":"https://alion.io/job/lifelancer-threat-mitigation-lead-network-and-systems-attack-surface","title":"Threat Mitigation Lead - Network and Systems Attack Surface","company":{"id":3853997,"name":"Lifelancer","domain":"lifelancer.com","url":"https://alion.io/company/lifelancer","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Networking","role_family":"Networking","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":129000,"max":253000,"currency":"USD","period":"year","gross":null,"usd_annual":253000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"KEV","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-10T14:53:53Z","employer_posted_date":null,"last_verified_at":"2026-10-10T14:53:53Z","board_verified":false,"closed_at":null,"days_open":7,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":7},"description":"Job Title: Threat Mitigation Lead - Network and Systems Attack Surface\nJob Location: Remote, Indiana, United States of America\nJob Location Type: Remote\nJob Contract Type: Full-time\nJob Seniority Level: At Lilly, the work is demanding because patients are waiting. We unite caring with discovery to help make life better for people around the world, knowing that every decision, every detail, and every day matters. Headquartered in Indianapolis, Indiana, our over 50,000 employees around the globe take on complex challenges to discover and deliver life-changing medicines, strengthen how health is understood and managed, and support the communities we serve. This is hard, urgent, selfless work—but it’s work worth doing. If you’re driven by purpose and ready to bring your best to work that truly matters for patients, we invite you to join us. \n\nOverview – Advisor - Cyber Programs, Mitigations, and Compliance\n\nThe Cyber Threat Mitigations Team is looking for an experienced service-area lead with strong background in threat surface management and the technical control solutions that support it (ex. vulnerability scanning and prioritization platforms, EDR, SIEM). \n\nThis role is designed for someone who excels at working with cross-functional teams to drive down security risk across Lilly's technology estate, and who will build durable connections with adjacent cybersecurity teams to ensure emerging threats translate into prioritized, actionable mitigation work. \n\nAs a Threat Mitigations Advisor, you will partner with internal cyber teams, platform and application owners, and business stakeholders to reduce the impact of identified vulnerabilities and threats. You will drive burndowns of targeted risks across the organization and support application teams in executing their cyber mitigation plans. \n\nYou will also serve as a technical anchor for the threat surface management squad, raising the capability of the analysts around you. \n\nKey Responsibilities:\nThreat Mitigation & Burndown Execution Assist in the intake of vulnerability, exposure, and threat intelligence data from across the cyber organization and translate it into scoped, executable burndown campaigns with clear owners, targets, and timelines. \nDevelop solutions that accelerate burndown execution, including automation of triage, deduplication, ownership identification, and notification. \nDrive burndowns to closure — tracking progress against targets, unblocking remediation owners, and escalating stalled or high-severity work. \nCapture root cause, technical recommendations, and lessons learned, and package them for the teams that can act on them to drive durable process improvement. \nThreat Mitigation Plan Validation & Support \nAssist platform, application, and infrastructure teams in interpreting mitigation requirements and completing their security plans, removing friction rather than simply tracking overdue items. \nServe as a technical resource for the ‘how’ \nConfirm implementation of threat mitigation requirements in our GRC tool — validating that required controls are in place, evidence is attached, and records are accurate before closure. \nThreat Surface Management Squad Leadership \nServe as the subject matter expert for the wider analyst pool, leading deep technical dives into vulnerabilities, adversary TTPs, and threat intelligence to build the team's capability. \nUpskill the Mitigation Analyst Pool by identifying skill gaps and closing them to sustain service area delivery. \nDevelop and refine capabilities and strategies that expand what the threat surface management squad can deliver to the wider organization. \nCross-functional Collaboration Build and sustain working relationships with adjacent cybersecurity teams including Cyber Defense, Identity and Access Management, Security Architecture & Engineering, and Platforms. \nServe as a technical advisor to cyber leadership and their stakeholders across the wider organization, translating threat and remediation data into decisions leadership can act on. \nBasic Qualifications:\n\nBachelor’s degree in Computer Science, Information Systems, or Cyber Security \n\n5+ years of experience in threat surface management, vulnerability management, cyber defense, or a related security discipline. \n\n3 years+ experience scoping and driving remediation or mitigation campaigns to closure across teams you do not directly manage. \n\n3 years+ of threat intelligence and exposure data, and how to apply it to prioritization (e.g., CVSS, EPSS, KEV, adversary TTPs, active exploitation reporting). \n\nPreferences: \n\nDemonstrated technical leadership — mentoring analysts, running deep technical dives, and raising the capability of a team without formal authority. \n\nHands-on experience with the security control platforms that generate and enforce mitigation work — vulnerability scanning and prioritization tooling, EDR, and SIEM. \n\nCertifications such as Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), GIAC Enterprise Vulnerability Assessor (GEVA), or equivalent. \n\nExperience automating triage, deduplication, ownership identification, or notification within a remediation workflow. \n\nExperience working alongside a cyber defense, SOC, or threat intelligence function. \n\nExperience in a regulated industry with formal control validation and audit expectations. \n\nExcellent stakeholder communication, with the ability to translate technical threat and remediation data into decisions for leadership and business owners. \n\nStrong problem-solving and analytical skills, with a keen eye for detail and risk management. \n\nLilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions. If you require accommodation to submit a resume for a position at Lilly, please complete the accommodation request form () for further assistance. Please note this is for individuals to request an accommodation as part of the application process and any other correspondence will not receive a response.\n\nLilly is proud to be an EEO Employer and does not discriminate on the basis of age, race, color, religion, gender identity, sex, gender expression, sexual orientation, genetic information, ancestry, national origin, protected veteran status, disability, or any other legally protected status.\nOur employee resource groups (ERGs) offer strong support networks for their members and are open to all employees. Our current groups include: Africa, Middle East, Central Asia (AMECA), Black Employees at Lilly (BE@Lilly), Chinese Culture Network (CCN), EnAble, Evolve, Lilly Indian Network (LIN), Organization of Latinx at Lilly (OLA), Pride (LGBTQ+ Allies), Veterans Leadership Network (VLN) and Women’s Initiative for Leading at Lilly (WILL).\n\nActual compensation will depend on a candidate’s education, experience, skills, and geographic location. The anticipated wage for this position is\n$129,000 - $253,000Full-time equivalent employees also will be eligible for a company bonus (depending, in part, on company and individual performance). In addition, Lilly offers a comprehensive benefit program to eligible employees, including eligibility to participate in a company-sponsored 401(k); pension; vacation benefits; eligibility for medical, dental, vision and prescription drug benefits; flexible benefits (e.g., healthcare and/or dependent day care flexible spending accounts); life insurance and death benefits; certain time off and leave of absence benefits; and well-being benefits (e.g., employee assistance program, fitness benefits, and employee clubs and activities).Lilly reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion and Lilly’s compensation practices and guidelines will apply regarding the details of any promotion or transfer of Lilly employees.\n#WeAreLilly\n\nThis job is curated by Lifelancer.Lifelancer is a talent-hiring platform in Life Sciences, Pharma and IT. The platform connects talent with opportunities in pharma, biotech, health sciences, healthtech and IT domains.\nPlease apply via Lifelancer platform to get connected to the application page and to find similar roles.\nOriginally posted on Himalayas","description_format":"text","description_chars":8293,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Job Boards & Aggregators","Healthcare Staffing"],"lifecycle":[{"event":"open","at":"2026-10-10T17:28:15Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":28,"reasons":["seen:6","velocity","win:early","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":253000,"is_top_pay":true},"html_url":"https://alion.io/job/lifelancer-threat-mitigation-lead-network-and-systems-attack-surface","json_url":"https://alion.io/job/lifelancer-threat-mitigation-lead-network-and-systems-attack-surface.json","meta":{"generated_at":"2026-10-18T01:13:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2070,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3853997},"rest":"https://alion.io/mcp/rest/get_company?id=3853997"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flifelancer-threat-mitigation-lead-network-and-systems-attack-surface"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flifelancer-threat-mitigation-lead-network-and-systems-attack-surface"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flifelancer-threat-mitigation-lead-network-and-systems-attack-surface"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lifelancer-threat-mitigation-lead-network-and-systems-attack-surface\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flifelancer-threat-mitigation-lead-network-and-systems-attack-surface"}]}