Associate DevSecOps Engineer, Platform and Tooling

Allergan; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

AbbVie is seeking an Associate DevSecOps Engineer to build a global enterprise‑grade Application Security program. You will implement security testing tools, integrate them into CI/CD, and deliver actionable findings to developers to enable secure software delivery.

You will work with SAST/DAST/IAST/SCA tools, ASPM platforms, and automation scripts to strengthen security across development lifecycles and pipelines.

Qualifications

• Bachelor's degree or Master's with relevant years of experience in DevSecOps/DevOps or SRE.
• 2+ years hands-on technical experience in DevSecOps/DevOps/SRE.
• Experience integrating application security tooling into CI/CD pipelines.
• Experience configuring and supporting CI/CD pipelines (GitHub Actions, Azure DevOps) and integrating security testing solutions.
• Experience automating workflows with Python.

Responsibilities

• Support or administer Application Security Testing tools (SAST/DAST/IAST/SCA) to identify vulnerabilities.
• Support ASPM tooling to centralize findings and integrate reporting into workflows.
• Integrate security tooling with CI/CD pipelines.
• Write custom scripts to automate workflows and integrations.

Skills

DevSecOps

DevOps

SRE

CI/CD pipelines

Python

Application security tooling

SAST/DAST/IAST/SCA

GitHub Actions

Azure DevOps

ASPM tooling

Education

Bachelor's degree

Master's degree

Tools

GitHub Actions

Azure DevOps

Snyk

JFrog Artifactory

ASPM tooling

Job description

Company Description

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology, and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn,Facebook,Instagram,XandYouTube.

Job Description

Join our Information Security team as an AssociateDevSecOpsEngineer and be part of the core team building a global enterprise-grade Application Security program from the ground up.You willplay a vital role in implementing security testing tools, integrating them into our CI/CD ecosystems, and delivering actionable findings to developers—enabling secure software delivery at scale. Together,we willmake a remarkable impact on people's lives by protecting the systems that discover and deliver life-changing medicines to patients who need them.

Responsibilities:

• Supporting or administering Application Security Testing (AST) tools (SAST, DAST, IAST, SCA, etc.) toidentifyvulnerabilities and configuration issues during the software development lifecycle.
• Supporting or administering tools such as Application Security Posture Management (ASPM) to centralize and deduplicate findings from multiple solutions and integrate reporting into software development workflows.
• Integrating security tooling with CI/CD pipelines.
• Writing custom scripts and code to automate workflows and integrate technologies.

Qualifications

Required:

• Bachelor's Degree and 5 years of experience OR Master's Degree and 4 years of experience.
• 2+ years’ experience of hands-on technical experience inDevSecOps/ DevOps / Site Reliability Engineering (SRE).
• Experienceintegratingapplication security tooling such as SAST/DAST/IAST/SCAinto CI/CD pipelines.
• Experienceconfiguring,supporting,or administeringCI/CD pipelines (such as GitHub Actions and Azure DevOps) and helping integrate security testing solutions.
• Experience automating workflows and integrating platforms via programming languages such as Python.

Preferred:

• Experience with commercial or in-house Application Security Posture Management (ASPM) tooling tofacilitaterisk visibility, finding management, and developer workflow integration.
• Experience implementing pre-deployment container and/or artifact security tooling (e.g.,image scanning, dependency validation).
• Experience implementing container and artifact security solutions (e.g.,Snyk,JFrogArtifactory), including image scanning, vulnerability assessment, and dependency validation in CI/CD pipelines.
• Experience administering Snyk in large enterprise environments.

Additional Information

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state orlocal law:

• The compensation range described below is the range of possible base pay compensation that the Companybelieves ingood faith it will pay for this role at thetimeofthis posting based on the job grade for this position.Individualcompensation paid within this range will depend on many factors including geographiclocation,andwemayultimatelypaymore or less than the posted range. This range may bemodifiedin thefuture.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick),medical/dental/visioninsurance and 401(k) to eligibleemployees.
• This job is eligible toparticipatein our short-term incentiveprograms.

Note: No amount of payis considered to bewages or compensation until such amount is earned, vested, anddeterminable.Theamountandavailabilityof anybonus,commission, incentive, benefits, or any other form ofcompensation and benefitsthat are allocable to a particular employeeremainsin the Company'ssoleandabsolutediscretion unless and until paid andmay bemodifiedat the Company’s sole and absolute discretion, consistent withapplicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.

US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

https://www.abbvie.com/join-us/reasonable-accommodations.html