Secure-by-Design Architect for Apps & Platform

AbbVie; North Chicago (IL); On-site; USD 170,000 - 230,000; Full time

Job summary

AbbVie is seeking an Application & Platform Security Architect to join our Information Security team. You will define security policies, patterns, and guardrails, and partner with development teams to ensure secure design, coding, configuration, and deployment across cloud environments.

You will lead risk-based security controls, perform threat modelling, and drive secure-by-design initiatives while aligning with AbbVie standards and regulatory requirements.

Qualifications

• Bachelor’s degree and 9 years of experience in information security and/or related functions (IT Audit, Risk Management or Security Architecture).
• Excellent ability to communicate information security concepts to business and IT stakeholders.
• Deep knowledge of the SDLC and enterprise systems; ability to propose creative security solutions.
• Experience implementing secure technology solutions in a complex global IT security environment.
• Strong understanding of application security principles, including OWASP Top 10 and secure coding practices.
• Expertise in secure session management, token handling, and authentication mechanisms (OAuth, SAML, OpenID Connect).
• Knowledge of cryptographic practices, encryption protocols, PKI management.
• Experience with Docker, Kubernetes, and cloud platforms (AWS, Azure, GCP).
• Familiarity with code analysis tools (SonarQube, Veracode) and vulnerability scanners (Burp Suite, Nessus).
• Understanding of DevSecOps with secured CI/CD pipelines.
• Self-starter, able to manage multiple projects; strong problem-solving skills.
• Ability to collaborate and influence cross-functional teams toward secure implementations.
• Knowledge of cloud computing concepts and security controls (Zero Trust, IAM, network security, data protection).
• Advanced knowledge of Identity Security concepts and least-privilege.

Responsibilities

• Define reusable security architecture patterns and guardrails across high-risk applications.
• Drive secure-by-design initiatives by integrating security early in the software architecture lifecycle.
• Represent security architecture in design authority boards and technical review councils.
• Evaluate application designs with IT customers to define security controls aligned with enterprise standards.
• Define application-specific security control architectures and design artifacts.
• Develop reusable implementation guidance and design patterns to scale the service.
• Collaborate with leadership to enforce security requirements and address identified risks.
• Act as a security architecture liaison to IT delivery and engineering teams.
• Support security aspects of initiatives during architecture, design, deployment, and operation.
• Research and assess new security threats and plan remediation actions.
• Foster an information security culture through education and processes.
• Adhere to corporate policies including GxP and data security.
• Lead threat identification through threat modelling and propose design changes.
• Collaborate with affiliates and vendors per AbbVie values to achieve goals.
• Design security architecture for applications meeting best practices and compliance.
• Work with DevOps to integrate security into the SDLC.
• Mentor teams and balance stakeholder interests; stay updated on industry trends.

Skills

Security architecture

Threat modelling

OAuth / SAML / OpenID Connect

PKI / cryptography

DevSecOps / CI-CD security

Cloud security

Vulnerability management

Zero trust / Identity security

Security governance

Education

Bachelor’s degree in information security or related field

Master’s degree in information security or related field

PhD in information security or related field

Tools

Docker

Kubernetes

AWS

Azure

GCP

SonarQube

Veracode

Burp Suite

Nessus

Job description

AbbVie is seeking an Application & Platform Security Architect to join our Information Security team. You will define security policies, patterns, and guardrails, and partner with development teams to ensure secure design, coding, configuration, and deployment across cloud environments.

You will lead risk-based security controls, perform threat modelling, and drive secure-by-design initiatives while aligning with AbbVie standards and regulatory requirements.