Senior Application Security Engineer – DevSecOps & Cloud

PowerToFly; North Chicago (IL); On-site; USD 130,000 - 180,000; Full time

Job summary

AbbVie is seeking a Senior Application Security Engineer to join its Information Security team in Illinois. You will implement and manage AST/ASPM tooling, integrate with CI/CD, and support development teams by addressing vulnerabilities.

You will communicate security risks, help scale DevSecOps across cloud environments, and mentor junior engineers while delivering detailed remediation reports and secure coding guidance.

Qualifications

• 7+ years in application security and software development in the pharma space preferred.
• Experience implementing, administering, and supporting SAST/DAST/IAST/SCA tooling.
• Strong knowledge of secure coding practices across Java and Node.js.
• Experience integrating security testing into CI/CD pipelines and DevSecOps.

Responsibilities

• Implement and maintain AST tooling (SAST/DAST/IAST/SCA) across SDLC.
• Implement and maintain ASPM tooling to centralize findings.
• Provide first-line support for users on false positives and remediation.
• Integrate security tooling with CI/CD pipelines.
• Develop detailed security findings and remediation reports.
• Demonstrate proficiency across security, development, containers, and cloud platforms.
• Communicate risks to technical and non-technical stakeholders.
• Triage vulnerabilities and support scaling across diverse environments.

Skills

Java

Node.js

SAST

DAST

IAST

SCA

CI/CD

DevSecOps

AWS

Azure

Infrastructure as Code

Security testing tooling

Communication

Education

Bachelor's degree

Master's degree

PhD

Tools

Snyk

Endor Labs

Terraform

CloudFormation

CSPM tooling

Job description

AbbVie is seeking a Senior Application Security Engineer to join its Information Security team in Illinois. You will implement and manage AST/ASPM tooling, integrate with CI/CD, and support development teams by addressing vulnerabilities.

You will communicate security risks, help scale DevSecOps across cloud environments, and mentor junior engineers while delivering detailed remediation reports and secure coding guidance.