Senior AppSec Engineer — Secure DevOps & Cloud

BioSpace; North Chicago (IL); On-site; USD 140,000 - 190,000; Full time

Job summary

AbbVie is seeking a Senior Application Security Engineer to strengthen our Information Security team. You will implement AST and ASPM tooling, integrate security into CI/CD pipelines, and support development teams managing security findings across cloud environments.

Requirements include extensive experience in application security, secure coding practices, DevSecOps, and collaboration with technical and non-technical stakeholders.

Qualifications

• Bachelor's Degree with 7 years experience; Master's Degree with 6 years experience; PhD with 2 years experience in the pharmaceutical industry preferred
• Respective years of demonstrated experience in application security and software development
• Respective years of demonstrated experience implementing, administering, and supporting application security tooling such as SAST/DAST/IAST/SCA
• Extensive knowledge of secure coding practices across multiple programming languages (esp. Java, Node.js)
• Extensive experience integrating security testing into CI/CD pipelines
• Strong knowledge of application security principles along with common vulnerabilities (e.g., OWASP Top 10, CWE) and associated mitigations
• Experience implementing and scaling DevSecOps practices and tooling within large organizations
• Experience implementing DevSecOps workflows in cloud environments such as AWS and Azure
• Experience developing Infrastructure as Code (IAC) via Terraform and/or CloudFormation
• Experience supporting developers with assessing and mitigating application security test findings
• Ability to effectively communicate technical findings to both technical and non-technical stakeholders
• Demonstrated ability to function as a principal engineer, generating original technical ideas and strategies
• Excellent written and oral English communication skills, demonstrated by presenting at leading scientific or technical conferences
• Experience coaching and supporting the development of junior engineers
• 5+ years of experience in application security and software development
• 3+ years of experience implementing, administering, and supporting application security tooling such as SAST/DAST/IAST/SCA

Responsibilities

• Implement and maintain Application Security Testing (AST) tools (SAST, DAST, IAST, SCA) to identify code and dependency vulnerabilities
• Implement and maintain Application Security Posture Management (ASPM) tools to centralize findings and integrate into SDLC
• Provide first-line support for users, resolve false positives, and guide remediation
• Integrate security tooling with CI/CD pipelines
• Develop detailed reports on security findings and remediation efforts
• Demonstrate proficiency across technologies related to application security, software design, containers, and cloud environments
• Communicate security risks and promote secure development practices to teams and management
• Triage vulnerabilities and manage security risks across diverse development environments

Skills

Application security

Software development

CI/CD pipelines

DevSecOps

AWS/Azure cloud

SAST

DAST

IAST

SCA

OWASP Top 10

Infrastructure as Code

Education

Bachelor's Degree

Master's Degree

PhD

Tools

Snyk

Endor Labs

CSPM tooling

Job description

AbbVie is seeking a Senior Application Security Engineer to strengthen our Information Security team. You will implement AST and ASPM tooling, integrate security into CI/CD pipelines, and support development teams managing security findings across cloud environments.

Requirements include extensive experience in application security, secure coding practices, DevSecOps, and collaboration with technical and non-technical stakeholders.