Senior AppSec Engineer: DevSecOps & Cloud Champion

AbbVie; North Chicago (IL); On-site; USD 130,000 - 210,000; Full time

Benefits offered by this job

Medical/Dental/Vision Insurance

401(k)

Paid Time Off

Long-Term Incentives

Job summary

AbbVie is seeking a Senior Application Security Engineer to strengthen our information security program. You will implement and manage AST/ASPM tooling, integrate security findings into CI/CD, and partner with development teams to reduce risk across cloud and containerized environments.

The role requires deep technical leadership, strong communication with stakeholders, and a track record of delivering secure software at scale within a large organization.

Qualifications

• 7+ years of experience in application security and software development.
• Experience implementing, administering, and supporting application security tooling.
• Strong knowledge of secure coding across languages (Java, Node.js).
• Experience integrating security testing into CI/CD pipelines.
• Ability to communicate complex findings to technical and non-technical stakeholders.
• Experience leading junior engineers.

Responsibilities

• Implement and maintain AST tools to identify vulnerabilities in the SDLC.
• Implement and maintain ASPM tools to centralize findings.
• First-line support for users, resolve false positives, guide remediation.
• Integrate tooling with CI/CD pipelines.
• Develop detailed reports on findings and remediation.
• Demonstrate proficiency across security, development, containerization, and cloud.
• Communicate security risks to teams and leadership.
• Triage vulnerabilities and manage risks across environments.

Skills

Java

Node.js

Secure coding practices

DevSecOps

Communication

Mentoring juniors

Education

Bachelor's Degree in a relevant field

Master's Degree in a related field

Tools

SAST/DAST/IAST/SCA tooling

Snyk

Endor Labs

Terraform / CloudFormation

CI/CD tooling integration

Job description

AbbVie is seeking a Senior Application Security Engineer to strengthen our information security program. You will implement and manage AST/ASPM tooling, integrate security findings into CI/CD, and partner with development teams to reduce risk across cloud and containerized environments.

The role requires deep technical leadership, strong communication with stakeholders, and a track record of delivering secure software at scale within a large organization.