Senior AppSec Engineer: Secure DevOps & CI/CD Pipelines

BioSpace; North Chicago (IL); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Long-term incentives

Job summary

AbbVie is seeking a Senior Application Security Engineer to join our Information Security team in the United States. You will implement and manage AST/ASPM tooling, integrate security into CI/CD pipelines, and support development teams across Java, Node.js, and cloud environments.

You will lead remediation guidance, triage findings at scale, and communicate risk to non‑technical stakeholders while advancing DevSecOps practices across multiple business units.

Qualifications

• Bachelor's degree in a related field; advanced degrees valued.
• Proven experience in application security and software development.
• Experience implementing and supporting SAST/DAST/IAST/SCA tooling.
• Strong knowledge of secure coding and SDLC security integrations.

Responsibilities

• Implement and maintain AST tools (SAST, DAST, IAST, SCA, etc.) and identify vulnerabilities.
• Administer ASPM tooling to centralize findings and integrate with SDLC.
• Serve as first-line support for users on false positives and remediation guidance.
• Integrate security tooling with CI/CD pipelines and DevSecOps practices.
• Develop detailed reports on findings and remediation efforts for stakeholders.
• Demonstrate proficiency across security, software, containerization, and cloud technologies.
• Communicate risks and advocate secure development practices to teams and management.

Skills

Application security

Software development

SAST

DAST

IAST

SCA

CI/CD pipelines

DevSecOps

AWS

Azure

Terraform

CloudFormation

Java

Node.js

Communication skills

Education

Bachelor's degree

Master's degree

PhD

Tools

Snyk

Endor Labs

CSPM tooling

Job description

AbbVie is seeking a Senior Application Security Engineer to join our Information Security team in the United States. You will implement and manage AST/ASPM tooling, integrate security into CI/CD pipelines, and support development teams across Java, Node.js, and cloud environments.

You will lead remediation guidance, triage findings at scale, and communicate risk to non‑technical stakeholders while advancing DevSecOps practices across multiple business units.