Software Engineer - Information Security (Hybrid)

BioSpace; North Chicago (IL); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Paid time off

401(k) plan

Job summary

AbbVie seeks a Full Stack Software Engineer within the Information Security and Risk Management (ISRM) team. You will design, develop, and maintain internal applications and tools to support security maturity and operational excellence.

You will apply modern full-stack practices and leverage AI to accelerate development and embed intelligent features. As part of AppSec Platform Engineering, you will collaborate across ISRM to deliver practical solutions, build secure code, and automate workflows

Qualifications

• Bachelor's degree in a related field and relevant experience.
• Strong Python and JavaScript/TypeScript proficiency.
• Experience building secure, resilient full-stack web apps with modern frameworks.
• Experience with AI-assisted development tools to improve code quality.
• Familiarity with secure coding practices (OWASP).
• Knowledge of DevOps/DevSecOps, CI/CD pipelines, IaC.
• Experience deploying production apps in cloud/container environments.

Responsibilities

• Design, develop, and maintain full-stack web applications and internal tools.
• Build tooling to support security program management and governance.
• Leverage AI-assisted development to accelerate coding and documentation.
• Use CI/CD pipelines to build, test, and deploy solutions.
• Integrate AI/ML capabilities for intelligent features and automation.
• Write clean, secure code in Python/JavaScript/TypeScript.
• Collaborate with stakeholders to translate requirements into tech specs.
• Participate in code reviews and uphold engineering standards.
• Manage a backlog of enhancements and bug fixes.
• Adhere to corporate security and quality standards.

Skills

Python

JavaScript/TypeScript

Full-stack development

AI-assisted development tools

CI/CD

DevSecOps

Cloud & containers

Communication

Education

Bachelor's Degree

Master's Degree

PhD

Tools

Jira

ServiceNow

Job description

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.

Company Description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.

Job Description

As a Full Stack Software Engineer within the Information Security and Risk Management (ISRM) team, you will contribute to the design, development, and maintenance of internal software applications and tools that support operational excellence and increased security maturity. As a member of the Application Security (AppSec) Platform Engineering team, you will build tools and capabilities to enhance AppSec processes. In addition, you will partner closely with other teams across ISRM such as program management, finance, etc. to build practical, high-quality solutions based on their specific needs. Projects will range from building application security program tooling to developing tools and capabilities that help us operate better as an organization. You will apply modern full-stack development practices and leverage artificial intelligence to accelerate development and embed intelligent features into the solutions you build.

Responsibilities

• Design, develop, and maintain full-stack web applications, internal tools, and API-driven solutions that support application security program management, including vulnerability discovery and tracking, data aggregation, risk reporting, and workflow automation.
• Build and support applications and tooling to enhance the efficiency of key support processes such as financial planning, project tracking, and headcount management.
• Leverage AI-assisted development tools (e.g., Claude Code, GitHub Copilot, ChatGPT Codex, or similar) to accelerate coding, testing, and documentation workflows.
• Use CI/CD pipelines (e.g., GitHub Actions, Jenkins, or similar) to build, test, and deploy solutions.
• Integrate AI/ML capabilities into applications to enable features such as intelligent alerting, anomaly detection, natural language interfaces, or automated triage to enhance the value of solutions delivered.
• Write clean, well-documented, secure, and maintainable code in modern languages such as Python and JavaScript/TypeScript across both backend and frontend layers.
• Collaborate with stakeholders to gather requirements, translate business needs into technical specifications, iterate rapidly on working solutions, and advance working prototypes into production applications.
• Participate in code reviews, contribute to team engineering standards, and support peer learning across the team.
• Manage and prioritize a personal backlog of application enhancements and bug fixes, communicating status clearly to stakeholders.
• Understand and adhere to corporate solution development standards including security and quality requirements.

Qualifications

• Bachelor's Degree and 6 years of experience OR Master's Degree and 5 years of experience OR PhD and 0 years of experience.
• Proficiency in Python (backend services, scripting, automation) and JavaScript/TypeScript (frontend and/or Node.js backend).
• Demonstrated experience building and deploying resilient and secure full-stack web applications, including frontend frameworks (e.g., React, Vue, or similar), REST APIs, and relational or NoSQL databases.
• Hands-on experience using AI-assisted development tools to improve code quality, velocity, and documentation.
• Familiarity with application security concepts and secure coding practices (e.g., OWASP Top 10).
• Familiarity with DevOps/DevSecOps practices, CI/CD pipelines, and infrastructure-as-code to facilitate code build, test, and deployment activities.
• Familiarity with deploying production applications via cloud and containerized models as appropriate.
• Ability to work independently on multiple concurrent projects with minimal supervision.
• Strong written and verbal communication skills, with the ability to engage and partner with both technical and non-technical stakeholders.

Preferred

• Experience integrating AI capabilities into production applications to enable enhanced usability, data insights, and autonomous/agentic workflow automation.
• Experience building solutions using low- and no-code platforms such as MS Power Apps, OutSystems, etc.
• Experience with project/operational tooling such as Jira, ServiceNow, or similar platforms.
• Experience building or using solutions to detect, prevent, or remediate security issues.
• Experience in large corporate or enterprise environments, ideally within technology, healthcare, or a regulated industry.

Additional Information

• Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our short-term incentive programs.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employer remains in the Company’s sole and absolute discretion unless and until paid and may be modified at the Companys sole and absolute discretion, consistent with applicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.

US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more: https://www.abbvie.com/join-us/reasonable-accommodations.html