Rising Application Security Engineer: Secure DevOps Impact

BioSpace; North Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

AbbVie in North Chicago, IL is seeking a Junior Application Security Engineer to join the Information Security team, leveraging application security, security engineering, and software development to support AST/ASPM tooling and CI/CD integration.

You will help implement and maintain AST tooling (SAST/DAST/IAST/SCA) and ASPM tooling, assist developers with remediation, and produce detailed security reports for multiple platforms and cloud environments.

Qualifications

• Bachelor's degree with 5+ years of experience or Master's degree with 4+ years.
• Experience in application security and software development.
• Experience implementing, administering, and supporting application security tooling (SAST/DAST/IAST/SCA).
• Knowledge of secure coding across languages (especially Java, Node.js).
• Experience integrating security testing into CI/CD pipelines.
• Understanding of OWASP Top 10 and related mitigations.
• Ability to communicate findings to technical and non-technical stakeholders.
• Experience coaching junior engineers.

Responsibilities

• Implement and maintain AST/ASPM tooling to identify vulnerabilities in the SDLC.
• Integrate security tooling into CI/CD pipelines and development workflows.
• Provide first-line support for false positives and remediation guidance.
• Develop detailed security reports and communicate findings to teams.
• Collaborate with developers to improve secure development practices.
• Participate in planning and evangelize secure development across units.

Skills

Application security

Security engineering

Software development

CI/CD pipelines

Security tooling

Education

Bachelor's degree +5 years experience; or Master's +4 years experience

Tools

SAST/DAST/IAST/SCA

ASPM tooling

CI/CD integration

Snyk

Endor Labs

Job description

AbbVie in North Chicago, IL is seeking a Junior Application Security Engineer to join the Information Security team, leveraging application security, security engineering, and software development to support AST/ASPM tooling and CI/CD integration.

You will help implement and maintain AST tooling (SAST/DAST/IAST/SCA) and ASPM tooling, assist developers with remediation, and produce detailed security reports for multiple platforms and cloud environments.