Senior App Security Engineer — CI/CD DevSecOps

AbbVie; Irvine (CA); On-site; USD 148,000 - 208,500; Full time

Benefits offered by this job

Long-term incentives

401(k) plan

Medical/dental/vision insurance

Paid time off

Job summary

AbbVie is seeking a Senior Application Security Engineer in Irvine, CA to strengthen secure development practices. You will implement and maintain AST/ASPM tooling, provide security reporting, and ensure integration with CI/CD pipelines across multiple projects.

The role requires extensive experience in application security, software development, and DevSecOps in cloud environments, with strong communication and mentoring skills.

Qualifications

• 7+ years in application security and software development
• Experience with implementing, administering, and supporting application security tooling such as SAST/DAST/IAST/SCA
• Strong knowledge of OWASP Top 10 and mitigations
• Experience in DevSecOps in cloud environments (AWS/Azure)
• Excellent written and oral English communication
• Experience coaching and mentoring junior engineers

Responsibilities

• Implementing and maintaining Application Security Testing (AST) tools (SAST, DAST, IAST, SCA)
• Implementing and maintaining Application Security Posture Management (ASPM) tools
• First-line support for users; resolve false positives and guide remediation
• Integrating security tooling with CI/CD pipelines
• Developing detailed reports on security findings and remediation
• Communicating security risks and promoting secure development practices

Skills

Application security

Software development

SAST/DAST/IAST/SCA

CI/CD integration

Cloud security

DevSecOps

Secure coding practices

Education

Bachelor's Degree

Master's Degree

PhD

Tools

Snyk

Endor Labs

Terraform

CloudFormation

CI/CD tooling

Job description

AbbVie is seeking a Senior Application Security Engineer in Irvine, CA to strengthen secure development practices. You will implement and maintain AST/ASPM tooling, provide security reporting, and ensure integration with CI/CD pipelines across multiple projects.

The role requires extensive experience in application security, software development, and DevSecOps in cloud environments, with strong communication and mentoring skills.