Associate DevSecOps Engineer - Secure CI/CD at Scale

AbbVie Inc.; Mettawa (IL); On-site; USD 85,000 - 162,000; Full time

Job summary

AbbVie seeks an Associate DevSecOps Engineer to join the Platform and Tooling group. This full-time role focuses on building and scaling an enterprise-grade security program, integrating AST/ASPM tooling into CI/CD pipelines, and delivering secure software at speed. You will automate workflows with Python, support GitHub Actions and Azure DevOps, and partner with developers to reduce risk.

Based in the U.S. with Illinois location considerations, the role offers a competitive salary and benefits.

Qualifications

• Bachelor's Degree and 5 years of experience OR Master's Degree and 4 years of experience.
• 2+ years’ hands-on experience in DevSecOps/DevOps/SRE.
• Experience integrating application security tooling into CI/CD pipelines.
• Experience configuring or administering CI/CD pipelines and CI tooling.

Responsibilities

• Support or administer AST/ASPM tooling to identify vulnerabilities and centralize findings.
• Integrate security tooling with CI/CD pipelines and workflows.
• Write scripts to automate workflows and integrate technologies.
• Collaborate with developers to deliver secure software at scale.

Skills

DevSecOps

DevOps

CI/CD

Python

GitHub Actions

Azure DevOps

Education

Bachelor's degree

Master's degree

Tools

SAST/DAST/IAST/SCA tooling

ASPM tooling

Snyk

JFrog Artifactory

Job description

Associate DevSecOps Engineer, Platform and Tooling

• Full-time
• Salary Min: 84500
• Salary Max: 162000
• Workday Global Grade: 16
• Travel: Yes, 5% of the Time
• Compensation: USD 84,500 - USD 162,000 - yearly

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology, and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com . Follow @abbvie on LinkedIn, Facebook , Instagram , X and YouTube.

Join our Information Security team as an AssociateDevSecOpsEngineer and be part of the core team building a global enterprise-grade Application Security program from the ground up.You willplay a vital role in implementing security testing tools, integrating them into our CI/CD ecosystems, and delivering actionable findings to developers—enabling secure software delivery at scale. Together,we willmake a remarkable impact on people's lives by protecting the systems that discover and deliver life-changing medicines to patients who need them.

Responsibilities:

• Supporting or administering Application Security Testing (AST) tools (SAST, DAST, IAST, SCA, etc.) toidentifyvulnerabilities and configuration issues during the software development lifecycle.
• Supporting or administering tools such as Application Security Posture Management (ASPM) to centralize and deduplicate findings from multiple solutions and integrate reporting into software development workflows.
• Integrating security tooling with CI/CD pipelines.
• Writing custom scripts and code to automate workflows and integrate technologies.

Required:

• Bachelor's Degree and 5 years of experience OR Master's Degree and 4 years of experience.
• 2+ years’ experience of hands-on technical experience inDevSecOps/ DevOps / Site Reliability Engineering (SRE).
• Experienceintegratingapplication security tooling such as SAST/DAST/IAST/SCAinto CI/CD pipelines.
• Experienceconfiguring,supporting,or administeringCI/CD pipelines (such as GitHub Actions and Azure DevOps) and helping integrate security testing solutions.
• Experience automating workflows and integrating platforms via programming languages such as Python.

Preferred:

• Experience with commercial or in-house Application Security Posture Management (ASPM) tooling tofacilitaterisk visibility, finding management, and developer workflow integration.
• Experience implementing pre-deployment container and/or artifact security tooling (e.g.,image scanning, dependency validation).
• Experience implementing container and artifact security solutions (e.g.,Snyk,JFrogArtifactory), including image scanning, vulnerability assessment, and dependency validation in CI/CD pipelines.
• Experience administering Snyk in large enterprise environments.

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state orlocal law:

• The compensation range described below is the range of possible base pay compensation that the Companybelieves ingood faith it will pay for this role at thetimeofthis posting based on the job grade for this position.Individualcompensation paid within this range will depend on many factors including geographiclocation,andwemayultimatelypaymore or less than the posted range. This range may bemodifiedin thefuture.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick),medical/dental/visioninsurance and 401(k) to eligibleemployees.
• This job is eligible toparticipatein our short-term incentiveprograms.

Note: No amount of payis considered to bewages or compensation until such amount is earned, vested, anddeterminable.Theamountandavailabilityof anybonus,commission, incentive, benefits, or any other form ofcompensation and benefitsthat are allocable to a particular employeeremainsin the Company'ssoleandabsolutediscretion unless and until paid andmay bemodifiedat the Company’s sole and absolute discretion, consistent withapplicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply