Cybersecurity AI Platform Advisor (R5)

At Lilly, the work is demanding because patients are waiting. We unite caring with discovery to help make life better for people around the world, knowing that every decision, every detail, and every day matters. Headquartered in Indianapolis, Indiana, our over 50,000 employees around the globe take on complex challenges to discover and deliver life-changing medicines, strengthen how health is understood and managed, and support the communities we serve. This is hard, urgent, selfless work—but it’s work worth doing. If you’re driven by purpose and ready to bring your best to work that truly matters for patients, we invite you to join us.
Job Title: Cybersecurity AI Platform Advisor (R5)
Role Overview
Cybersecurity AI Platform Advisor provides senior technical leadership and advisory guidance for AI-powered use cases across Eli Lilly's Cybersecurity platforms. This role owns the architectural vision and technical direction across the full delivery lifecycle — from identifying and scoping use cases through design, build, test, and production deployment — while partnering with engineering teams to execute against that architecture. Core responsibilities include architecting Agentic AI automation pipelines and RAG workflows that address real security challenges such as platform operations automation. The role requires close collaboration with security operations, data privacy, compliance, and platform engineering teams to ensure solutions are secure, explainable, and appropriate for a highly regulated pharmaceutical environment.
Key Responsibilities
Agentic AI Use Case Discovery & Architecture
Serve as the principal technical translator, converting complex business challenges into clear, actionable Agentic AI requirements.
Architect end-to-end agentic systems by defining solution blueprints, staging plans, agent roles, tool inventories, memory strategies, orchestration patterns, and inter-agent communication protocols.
Advise business stakeholders in refining AI adoption objectives and translating them into scalable, viable AI architectures.
Guide stakeholders through Proof of Concepts (PoCs) and development initiatives, from opportunity identification to production handover.
Establish agentic AI guardrails and approved architecture patterns that address prompt injection, unintended action loops, tool misuse, autonomy escalation, and lateral movement risks arising from agent-to-agent trust.
Define agentic AI security acceptance criteria, including sandboxing requirements, permission boundaries, HITL trigger conditions, and kill-switch mechanisms, before solutions progress to development.
Partner with cross-functional teams to identify, scope, and prioritise agentic AI use cases.
Maintain a version-controlled registry of agentic AI use cases, including design blueprints, threat models, tool manifests, and reusable agent patterns to support cross-team adoption.
Agentic AI Architecture & Technical Advisory
Define reference architectures and technical standards for AI agents built on frameworks such as LangGraph, AutoGen, and CrewAI, enabling engineering teams to execute multi-step cybersecurity workflows autonomously and reliably
Establish and promote Agentic AI coding standards and best practices across engineering teams
Design and provide guidance on agent tool layers for security platforms, defining least-privilege access controls and strict input/output contracts for implementation by engineering teams
Architect RAG pipelines for agent knowledge retrieval by defining source validation, document-level injection protections, and context boundaries to prevent data exfiltration through agent outputs
Implement runtime enforcement engines that intercept, validate, and sanitise agent inputs, tool calls, and outputs against configurable security policies, blocking unsafe actions before execution
Implement and motivate teams to implement automations in different manual work done by teams today
Apply CI/CD, Infrastructure-as-Code, and version control practices to agent configurations, tool definitions, prompt templates, and orchestration logic to ensure reproducibility and auditability
Testing, & Safety Validation
Design and execute agentic-specific test plans covering multi-step reasoning accuracy, tool call correctness, loop detection, boundary enforcement, and failure mode handling across diverse scenario types
Validate that human-in-the-loop checkpoints, sandboxing controls, permission gates, and emergency kill-switch mechanisms engage correctly under adversarial and edge-case conditions
Benchmark production-candidate agents against security policy compliance, action explainability, latency SLAs, and cost efficiency before sign-off for deployment
Production Deployment & Lifecycle Management
Deploy agentic AI systems to enterprise cloud environments (AWS, Azure, GCP) with structured action logging, decision tracing, cost monitoring, and real-time alerting on anomalous agent behaviour
Implement agent health monitoring covering task completion rates, tool failure patterns, reasoning drift, and policy enforcement effectiveness — with automated alerts and rollback triggers
Manage the full agentic lifecycle: version-controlled agent releases, controlled rollouts, A/B evaluation of agent variants, scheduled re-validation against updated threat landscapes, and deprecation of obsolete agents
Integrate agents with upstream / downstream security platforms — SIEM, SOAR, EDR, identity, and ticketing systems — through governed API layers that enforce authentication, rate limits, and action audit trails
Provide Level 3 engineering support for agentic incidents including runaway action loops, unexpected tool invocations, and agent-induced security events — with structured post-incident reviews
Governance, Collaboration & Knowledge Sharing
Define and maintain agentic AI governance standards covering action logging requirements, human oversight triggers, permissible tool scopes, and escalation procedures for high-risk autonomous decisions
Collaborate with data privacy, legal, compliance, and quality assurance teams to ensure agentic systems meet regulatory obligations around auditability, explainability, and high-risk AI classifications
Create and maintain comprehensive documentation: agent architecture diagrams, tool manifests, decision trace examples, red-team reports, runbooks, and post-deployment model cards
Mentor junior engineers and security operations personnel on safe agentic design patterns, tool authoring best practices, and responsible AI principles in cybersecurity contexts
Engage with vendors, open-source communities, and technology partners to evaluate emerging agentic frameworks, influence platform roadmaps, and bring best practices back into Lilly's engineering standards
Qualifications
Required
10+ years of software or platform engineering experience, including significant experience in an architecture, technical leadership, or senior advisory capacity, with at least 2 years focused on AI/ML or LLM application development
Demonstrated experience delivering AI use cases end-to-end: from design through testing to production deployment
Working knowledge of cybersecurity domains including SIEM, EDR, network security, threat intelligence, or identity platforms
Proficiency in Python for ML model development, LLM orchestration (e.g. LangChain, LlamaIndex), and API integration
Strong understanding of LLM-specific threat models: prompt injection (direct and indirect), hallucination, jailbreaks, data poisoning, and model misuse
Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS adversarial AI threat framework
Experience building or operating CI/CD pipelines for ML/LLM systems including automated testing and deployment gates
Solid understanding of cloud security across AWS, Azure, and GCP environments
Strong scripting capabilities in Python, PowerShell, or Bash; proficient in RESTful APIs and system integration patterns
Excellent written and verbal communication skills with the ability to translate AI concepts for both technical and business audiences
Bachelor’s degree in computer science, Cybersecurity, Information Systems, or related technical field, or equivalent practical experience
Preferred
Experience with AI security reviews, adversarial red-teaming, or AI governance frameworks in regulated industries
Exposure to agentic AI frameworks (AutoGen, CrewAI, LangGraph) and associated safety mechanisms such as HITL, sandboxing, and tool-call guardrails
Familiarity with AI regulatory expectations including high-risk AI classifications, auditability requirements, and conformity assessments
Experience with containerization (Docker, Kubernetes) and cloud-native architectures for ML workloads
Project management exposure or Agile / Scrum experience within cross-functional AI delivery teams
Eli Lilly is an equal opportunity employer and is committed to creating a diverse and inclusive workplace.
Lilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions. If you require accommodation to submit a resume for a position at Lilly, please complete the accommodation request form (https://careers.lilly.com/us/en/workplace-accommodation) for further assistan

Work arrangement
No